Subject: Information Security Management.

Case study:

Consider a small business that has established an online presence using its Web site. Assume that the business hosts its own Web site. Follow all the steps of the security life cycle, treating the small business Web site as the target information asset. Also assume that the enterprise has a current security plan and current business continuity plan.

Please explain using security life cycle as per image

. Security life cycle consists of the following steps: 1. Security planning 2. Security analysis 3. Security design 4. Security implementation 5. Security review 6. Continual security