Computer Information System

Running head: COMPUTER INFORMATION SYSTEM
COMPUTER INFORMATION SYSTEM
Name of the Student
Name of the University
Author Note:

COMPUTER INFORMATION SYSTEM1
Table of Contents
Introduction......................................................................................................................................2
Discussion........................................................................................................................................2
Benefits of Risk Assessment Procedure......................................................................................2
General Data Protection Regulation (GDPR)..............................................................................4
ISO 31000 Risk Management......................................................................................................5
Impact of IT Security Audit.........................................................................................................5
Alignment of IT security with organizational policy..................................................................7
Conclusion.......................................................................................................................................8
Part 2................................................................................................................................................9
Part 3..............................................................................................................................................10
Bibliography..................................................................................................................................11

COMPUTER INFORMATION SYSTEM2
Introduction
The following report is all about IT security specialist who is working for a leading
security consultant. The report deals with creating three-part engaging guidebook which needs to
be completed. With every passing day, there has been growing news in media with respect to
security beaches in various organization. Security policy can be stated as a written document for
a firm that outlines the method of protecting the firm from threats. It is merely inclusive of
system-based threat and method of handling situation at the time of occurrence. This particular
policy is needed for identifying all the major assets of the firm along with potential threat for the
given asset. Organization need to update their security policies on regular basis.
In the coming pages of the report, an idea has been provided with respect to benefits of
risk assessment procedure. An overview has been provided about the fact that how data
protection like GDPR and ISO 31000 risk management standard can be applied to IT security.
Impact of IT security will have on the security of the firm. The last section of the report deals
with fact that how and IT security can be aligned to the organizational policy.
Discussion
Benefits of Risk Assessment Procedure
Risk assessment will help the firm to improve their overall security. With respect to in-
depth evaluation, it aims to offer various benefits which can be valuable for any firm.
Identification of Security Vulnerabilities: Risk assessment will help in evaluating the
firm system which is achieved by taking into account both external and internal environment.