Information Security Management.
Description REPORT Learning Outcomes This assignment will cover the following learning outcomes: • Demonstrate an understanding of information security management requirements. • Demonstrate understand of and justify the use of appropriate security and cryptographic techniques for the design and implementation of secure systems. Background Choose a business/company/industry to address/design following security concerns. Task 1 (40%, 2000 words): Investigate how the chosen company could be benefit from security best practices (e.g., Cyber essentials, GDPR, ISO 27000 series standard) and security policies, standards, procedures and guidelines. Task 2 (20%, 1000 words): Analyse and recommend a security model and security controls for the selected business. Compare like 2 standards like ISO 27000 and ISO 27001 or etc. Task 3 (20%, 1000 words): Discuss how cryptographic mechanisms can be used in the selected business to improve its security posture Task 4 (20%, 1000 words): Critically analyse the use of penetration testing as a tool of risk assessment for the selected business Give examples and critically analyse the use of penetration testing and how it can benefit my chosen business – direct recommendations List penetration testing tools Conclusion Speak as first person