Management of Security Operations

The purpose of this exercise is for you to think extensively about the management of security.

Suppose that your company, Finance-International, provides advice for seniors who are retired or contemplating retirement. Here are some of Finance-Internationals characteristics. This list is not complete; you may add characteristics and assumptions of your own as long as they are consistent with these, and you tell us what they are.

Finance-International:

provides financial planning (including retirement planning)

advises on appropriate places to live

uses face-face meetings in company offices, at home visits, online advice, and advice via telephone.

may include interviews with family members and spouses

employs analysts who work in all parts of the globe.

7/24 online assistance available for clients

Finance-International provides the bulk of client facing functions using a software as a service (SaaS) model

Finance-International internal operations still primarily rely on the traditional client server model.

Part (1)

In your view, what are the three (3) most important security issues for managing its ongoing operation? Explain your reasoning and what other issue you considered but rejected for the three most important. Make your reasoning as specific to Finance-International as possible.

Your solution to Part (i) should be 3-6 pages long with 12-point font, single-spaced text.

Part (2)

Describe the following in a paragraph or two each. Your solution to Part (2) should be 2-4 pages long with 12-point font, single-spaced text.

2.1. Three good examples of potential disasters for Finance-International

2.2 The three most significant ways in which Finance-International should be organized for IT disaster recovery (organizational roles)

2.3 An appropriate organization for decision-making at Finance-International disaster time

2.4 Priorities for IT asset recovery at Finance-International (which IT systems are brought up first/last and why)

2.5 Two potential considerations you took in to account to address Finance-Internationals fragmented architecture in the context of item 2.4.

2.6 Three of the first steps you would take to convince Finance-International management to fund disaster preparedness, consider cost/benefit analysis

Hints:

As with previous assignments, tailor your response to the particular needs of Finance-International.

Justify your responses.

Tell us about options that you considered and rejected.

End with a list of references following the standard reference format, as described in References and Citations document.