Developing a Strategic Security Policy for Choice Hotels International

Running head: INFORMATION SECURITY
Information Security
Name of the Student:
Name of the University:
Author note:

1Information Security
Executive Summary:
Information is considered as one of the vital asset to any organization especially in case of
service-driven organization such as hotel where information is related to customer, service,
administration, management. The purpose of this report is to research, formulate and develop a
strategic security policy for Choice Hotels International, Inc. which is the chosen organization in
this report. Further, the report identifies and assesses the potential threats and vulnerabilities of
the Hotel’s network and finally discusses how such threats and vulnerabilities can be mitigated
based on the research findings.

2Information Security
Table of Contents
Introduction......................................................................................................................................3
Answer to (a):..................................................................................................................................3
Strategic Security Policy:-...........................................................................................................3
Answer to (b):..................................................................................................................................5
Identification and assessment of the potential threats and vulnerabilities of the hotel’s network.
.....................................................................................................................................................5
References........................................................................................................................................9

3Information Security
Introduction:
Information security is referred as the strategies that manages the tools, processes as well
as policies to identify, protect or prevent the digital as well as non-digital information and
information assets irrespective of the format of information and whether the information is in
state of transit, or in state of being processed or is at rest in storage. An information asset is a
body of information, an information storage system or an information processing system, which
is of value to the organization. Information security policy is designed and developed in order to
protect integrity, availability and confidentiality of computer system data from malicious users
(Safa, Von Solms, and Furnell 2016). An effective security strategy is dynamic, comprehensive
and flexible to reply to security threat type. The process of developing a security strategy
consists of planning, assessment, regular monitoring and implementation and include mix of
actions such as access management measures, policies and procedures, communications systems,
technologies and systems integration practices to counter imaginable threats and vulnerabilities.
The security strategy document defines and arranges information security as well as security
initiatives that the organization must initiate to strengthen the protection of information and the
related technology (Obes, Yamada and Richarte, 2013). In the context of data security any
potential danger to the information or system can be referred to as threat. One important function
of data security is to identify and assess the potential threats assessment, categorically classify
them and evaluate the potential damage that might be caused by them (Rao and Selvamani
2015).
Answer to (a):
Strategic Security Policy:-
Choice Hotels International identifies information security as one of its primary requirement for
smooth running of its business operations. The hotel has formulated strategic security policy to
protect data and information assets. This policy involves the security and management of the
Choice Hotels International’s information assets (Kim, Lee and Ham 2013). It is notable that
besides information technology (IT) department everybody must also take the responsibility of
information security. A security strategy can be considered as successful if it includes every
stakeholder and can develop persistent processes and strategies to motivating users in taking
ownership and help build a strong security policy.