Information security baseline is a set of minimum security requirements to protect information asset and achieve security goals.

Research based information security assignment

Scenario task:

Information security baseline is a set of minimum security requirements to protect information asset and achieve security goals. According to Federal Office for Information Security (FSI), Information security baseline is “ a methodology to identify and implement information security measures in an organization to achieve an adequate and appropriate level of information security.” Suppose you are Information Security Officer in Al-khaleej Company. Consider the following task:

Task 1:

For a system to be considered secure, it must be managed to a standard equivalent to, or better than the minimum security baseline policy. Accordingly, create a security baseline policy to protect PCs or laptops in your organization. Your policy should include all security requirements that should be met to protect the PCs or laptops.

Task 2

Implementing a high level security technologies on different assets are not enough to ensure security. Human factor is always treated as the weakest point in any security architecture. Therefore, security awareness program is important countermeasure to achieve security requirements. Develop a security awareness program to communicate security policies and requirements so that employees in your organization know, understand and can follow them.

Task 3

Suggest and analyze two risk management tools or software which facilitate the information security risk management work.
Note: Need of references as CU harvard
Follow this guide as a template for task 3 (risk management):
https://itsecurity.uiowa.edu/sites/itsecurity.uiow…