Please read through this introduction and requirements first, and then read the word documents I provided( it has all the background and instructions).
A well-known company (you select the industry or the company that will help you design the plan) has suffered a breach and is concluding its return to normal operation after hiring a forensic firm. As a result of the intrusion, the CISO was terminated. The CEO and CFO are hiring you to be the new company CISO.
They have asked you to create a 90-day plan for the company that will address the issues of the breach and will implement a comprehensive security program. The CEO and CFO want a five (5) to ten (10) minute presentation of your plan that will be at the quarterly company board meeting. You must be able to submit your security program to the board-of-directors before the meeting.
At a minimum your security plan should cover recommendation regarding corrective measures and activities that will improve the company (you may make assumptions regarding the cause of the breach and the weaknesses of the organization, but, you must explain those assumptions):
1. Reference at least 3 CIS controls and the reason you need them and what the expected benefit will be to implement them and mitigate the weakness you identify (do not just list the CIS control and what it does).
2. Identify 3 Risks that might impact the company and your proposed mitigation plan (what are the 3 risks and what will happen to the company if they are not mitigated; remember they may not mitigated completely).
3. Using the organization chart below build a RACI with at least two IT roles, Legal, Financial and Business and, 5 activities that these roles may be involved in and interact. Describe the benefits that the company will realize through this RACI
4. Write up the Security Policy (maximum 200 words) for the company. Remember to reference what a Security Policy may contain. Recall that it is not prescriptive on specific activities.
Click here to have a similar A+ quality paper done for you by one of our writers within the set deadline at a discounted rate