Information assurance security plan
Select an organization of your choosing to perform an abbreviated assessment on and then write a 3-4 page information assurance security plan outline that lays out key considerations for decreasing risk and mitigating assessed vulnerabilities. The outline should contain a brief summary of the assessed challenges, a discussion of key IA considerations, options for addressing assessed risk items, and a recommended mitigation approach for each assessed risk. This assignment is intended to gain an initial application of your IA knowledge and to help you focus on the considerations you might address in your research paper. Further, the selection of a particular organizational network, system or information storage solution will set the stage for the Week 8 risk assessment case study.
Sample Solution
Whereas information assurance contains all the elements of information security, new elements have emerged mainly focusing on availability, and integrity. Information assurance provides a view of information protection that includes defensive measures in three states such as processing, storage, and transmission (Schou & Trimmer, 2014). To defend information and data there are three fundamental countermeasure categories, namely, technology, operations, awareness, training and education. A decade and a half ago, the U.S. government identified these as the three primary countermeasures to protect Critical Information Infrastructure (CIP). It is important to remember that in an electronic era, information must be defended not only for national security but for legal reasons such as FERPA and HIPPA.
