Essays on Exercises on Information security management

This paper introduces the information on the C.I.A. triangle, why it is significant and widely referenced, describes and explores top-down strategic planning, how it differs from bottom-up strategic planning and which is more effective in implementing security in a large, diverse organization, and observes criteria that have to be utilized when examining whether or not to implicate law enforcement agencies during an accident or other incidental events.

To start with, The CIA Triad is a professional and widely used benchmark for security policy development that is aimed at identifying some problematic areas for information security. It means confidentiality, integrity and availability. 1. Confidentiality: the property of information resources, including information related to the fact that it will not be available or disclosed to unauthorized persons.

2. Integrity: the permanence of information during its transmission or storage. 3. Availability: the necessary information should be available when authorized persons need it. The CIA is really significant and widely referenced because it is an important security model for protecting personal data and other information from unauthorized access.

Generally speaking top-down strategic planning is a well-planned process in which top managers can formulate the company’s strategies and then implement them in the production process.

Talking about the difference between top-down strategic planning and bottom-up strategic planning, it is possible to say that bottom-up strategic planning can be viewed as a necessary planning technique that is needed to put in line some strategic plans with real data or tactics. Thus, for large and diverse organizations such as MacDonald’s, etc., it would be much effective and beneficial to use top-down strategic planning.

Observing criteria that have to be utilized when examining whether or not to implicate law enforcement agencies during an accident or other incidental events, it is possible to mention that the major criteria, which should be taken into consideration include as follows: what state, what type of crime was committed, etc.

In conclusion, it is possible to sum up that the theme about information security management was explored and observed in a proper way. The C.I.A. triangle plays a huge role and is essential in protecting data and necessary information. This is no doubt that top-down strategic planning would be much better for large companies or organizations.