Many organizations appoint an information security

information security Inde, is a dicat information security manager necessary, let alone an entire service? Unlike the economic security service, whose area of ​​responsibility is more or less defin, albeit sometimes ruc to a narrow range of tasks to combat theft, responsibility for implementing measures to protect the information entrust to them is inde borne by each employee of the enterprise. International and national standards for information security management use the following construction: ”

manager” that is, the appointment of such a manager is not mandatory. And it is also explicitly stat there that “it is common practice to appoint an owner for each asset who is responsible for its day-to-day protection.”

The provision on the mandatory information security

Fulfillment of information job function email database security requirements is includ in the job responsibilities of each employee, and for those who are allow to access confidential information, in the employment contract [iv] .

What does business expect from a specially appoint information security manager? The answer to this question lies in the name of this position: manager, that is, a manager. The information security manager must manage the information security of the enterprise. The main purpose of the information security service is to achieve the goals set for the information security management system.

The objectives of implementing an information security management system can be determin by answering the following questions:

Risk management – how can the system improve

risk management in the field of information security?

b) effectiveness – how can the system improve information security management?

c) benefits for the enterprise – how can the system create competitive advantages for the organization? [v]

 

 

But if we use the full list of enterprise security goals, then the performance indicators of economic security services can include a ruction youth marketing: top 10 trends in conflict situations in the team, an increase in the company’s agb directory business reputation index in the market, and even the level of satisfaction of other structural divisions with the security service’s activities. Please note that this service should not act as some kind of punitive body, it should not be fear, and especially hat.

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top