Information Security: There is no current information security standard at Swagger Distribution. You know that one needs to be implemented. Summarize two key information security practices you recommend the company implement. Provide supporting examples/research/justification for your two recommended information security practices. Use appropriate terminology learned from the information assurance module.

Question

Computers and Technology

Averie Thomas

19 September, 19:51

Information Security: There is no current information security standard at Swagger Distribution. You know that one needs to be implemented. Summarize two key information security practices you recommend the company implement. Provide supporting examples/research/justification for your two recommended information security practices. Use appropriate terminology learned from the information assurance module.

+1

Answers (1)

Know the Answer?

Karina Blackwell · Answer 1

Information security is the mechanism in which the security measures are take to protect the information or data. The implementation of two standards of the information security can be : -

ISO/IEC 27002:2005: - It is the standard for the security domain that has 10 major guidelines of security control as well as code of information security for implementation and maintenance. Some of the guideline of this standard are access control, human resources security, security policy, asset management etc. ISO/IEC 27001:2005 : -it is the standard for information security management system (ISMS) for organizations to maintain the the control of information security in terms of legal and technical way. The functions performed in this standard are reviewing, monitoring, tracking, operating, maintaining etc of the information security.