Week 1 Assignment

Security Team Program Development: Themes
Adequate documents and records should provide evidence that all Security characteristics are accurate and management is accountable. For example, Yummy Good Treats should create invoices and other documents that are pre-numbered, user-friendly, and informative that will help them manage the risk associated with the environment.
Segregation of duties will require IT and the Legal department to handle different elements of related activities. For Example, IT's job is to implement and support the technical aspects of security policies compliance as it relates to Yummy Good Treats infrastructure. Legal Staff should review IT's work to ensure everything is in compliance. This creates a check and balance.
Physical Control will help protect Yummy Good Treats information security policies. The controls should include electronic and mechanical controls such as employee ID cards and passwords that restrict access to company information outside of office. Proper Authorization of activities helps ensure Yummy Good Treats employees is in compliance with polices unless management authorizes something different.
Critical Success Factor: Information Risk Management
The goals and objectives of the security team should be to ensure all records are maintained in reasonable detail to accurately reflect the transactions dispositions of the assets of the organization. This will encourage employees to adhere to internal controls while ensuring management goals are achieved in accordance with IRM policy. The security team should perform a risk analysis to minimize risk. By doing this, managers should be able to make strategic decisions based on the information gathered. It’s imperative getting your electronic house in order to mitigate risk & expenses should electronic discovery become an issue. This should