Miami Dade College Information Security Management Paper

Overview

There are two parts for this:

For this homework, you will continue to consider the organization that you identified in homework #1. (Attached)

Part 1 (first document)

You that organization's Information Security Officer and you are tasked with leading the organization's information classification and risk management efforts.

For this assignment, you will consider your organization:

• Create a list of your organization's critical information assets and identify their "owners" within the organization (try to be relatively thorough - 25 different information assets across 5 different units of the organization might be appropriate)
• Develop and information classification system that includes a definition of each of the categories within the system.
• Provide one example of how and why information is classified for each category in your system
• For each information asset you identified, give the owner and classification of that asset (you don't have to give detailed explanations here).

An example that could help is attached ()

Part 2 (Second document)

You that organization's Information Security Officer and you are tasked with leading the organization's information classification and risk management efforts

Now, you will consider your organization:

Create a qualitative risk assessment matrix with one axis labeled by "cost' and another axis labeled by "likelihood". Use this risk assessment matrix to analyze the vulnerability of three information assets in your organization (just three examples are needed for this part).