Security in Computing 5th Edition by Shari Lawrence Pfleeger, Charles P Pfleeger, Jonathan Margulies

Exercise 7

Investigate your university’s or employer’s security plan to determine whether its security requirements meet all the conditions listed in this chapter. List any that do not. When was the plan written? When was it last reviewed and updated?

Step 1 of 2

Security Plan

• Security planning is a process where in a security plan is created. A security plan is a proper documentation generated that lists the way the organization addresses to it security requirements.

• The plan is reviewed at regular intervals and revised as the security needs changes. A security plan is considered to be good when all the actions listed in it are effectively implemented and practiced and can also be improved.

• There is a list of contents which are basic to all the security plans whether it is developed for an organization or a university.

• They are policy, current state present at the time of plan, security requirements, controls to be implemented, accountability, timetable as to when to perform the security action and continuing attention implying regular updation.