Homework - Case Study Example

Homework As I search for "security best practices", several internet articles had topics on the information security officer, vendor management, as well as physical security. The paper will discuss security best practices with regards to these three topics mentioned above. It will also comment on papers that other students have written regarding this topic.
Information Security Officer
The first thing that every security program should do is establish the existence of the Information Security Officer (Putvinski 1). Relying on the size of a person’s security environment, this could be a current worker who has the accessibility to take on further duties or a full-time worker. Apart from the time element, a firm must clearly define the prospects of the Information Security Officer and determine whether a worker is capable of filling the role (Putvinski 1).
Vendor Management
A firm is only as strong and tough as its weakest link, and when the organization works with third-party contributors their information security collapse can become the organization’s issue. Organizations should ensure that they document which vendors get confidential information, in addition to how this information, is taken care of when in the position of the vendor (Putvinski 1). The lack of authoritarian vendor guidelines could raise the risk of releasing a client’s private information.
Physical Security
Documents do not storm out of the organization on their own. Having strict rules regarding who can physically access the offices, as well as how they gain entry, might decrease the possibility that an unauthorized person is present illegally to take information (Putvinski 1). The next step is to make sure that an organization’s documents how physical information is kept and destroyed.
Comments on Papers
Student 1
The issues discussed in student 1’s paper slightly resemble the findings in my paper. Student one talked about security issues with regards to protecting information systems through incorporating security policies. Such a topic is extremely wide in the IT field, and I feel that the student could have explained further as to the types of policies that could be implemented in order to secure our information systems.
Student 2
The second student’s paper was extremely educative. The student focused on the diverse fields of the security best practices touching over every security part that information systems involve. The paper also mentions some of the issues that I discussed in my paper such as physical security, vendor management and information security officers. Such a paper would be extremely helpful to someone who, in particular, wants a summary of the findings on security best practices.
Student 3
The third student, on the other hand, told us of the main components of Microsoft’s program of assessing the environment, as well as protecting networks, severs and client. The student only mentioned this, but it would be better if the student summarized these factors in order for a reader to understand how Microsoft protects its information system.
Student 4
Finally, student four also did a better work just like student two. He explains to the reader of how the NIST document adapted its findings from OECD guidelines and modified the information in the guidelines. The information located on the NIST document are extremely helpful to organizations that use information systems in their dealings, and the fourth student did a marvelous job of explaining this.

Work Cited
Putvinski, Matthew. IT Security Series Part 1: Information Security Best Practices. N.p, 2009. Web. Read More