Then, analyze the following hypothetical situation and answer the questions below:

The Information Security Department of the MFC company is facing problems in meeting the SLAs (Service Level Agreements) established for working security incidents. The established SLA is 24 hours; however, it is taking the security specialists longer, and there is no record of how long it takes them to do this work. This is causing MFC's senior management a lot of concern. As the manager of the IT Security Department, you must ensure that the work is completed in full and on schedule.

1.Make a paragraph justifying the creation of a Management Security Team to address the situation and oversee that all SLAs are met.

2.Determine whether the team will work in a centralized or decentralized manner. What does each way of working entail? Which would you choose?

3.Explain the three (3) steps in the process of determining performance metrics.

4.Based on the above situation, what metrics would you recommend to begin collecting data and measuring?

5.Which departments would you consult with on the recommended metrics before implementing them?

6.There are several certification programs available in the market for information security professionals. Among these are CISSP, SSCP, GIAC and CISA. Visit the websites of these programs and research the certification purpose of at least two (2) of these.

7. Based on the information you get on the Internet about the certifications, explain what the advantage is for security team members to obtain one of them.