Guidelines for Managing Information Security Risks for Cosmos Organization

Running head: INFORMATION SECURITY MANAGEMENT
Information Security Management
Name of the Student
Name of the University
Author’s Note:

1
INFORMATION SECURITY MANAGEMENT
Executive Summary
The main aim of this report is to understand the entire case study of Cosmos organization. It
is one of the most significant online newspapers that provide news to their clients or
customers by means of online delivery of news. The client, who has the wish to access their
news, would have to get them registered with this newspaper. They have decided to upgrade
their information systems for the betterment of their business. There are various security risks
or threats to this information system like phishing, denial of service attacks or DoS attacks,
virus, and injection of malware, hacking, spamming, Trojan horses and many more. All of
these risks could be easily mitigated with the help of various mitigation strategies. The major
and the most important mitigation strategies are firewall implementation, antivirus
implementation and many more. This report has properly outlined the guidelines for
managing the information security risks for Cosmos organization.

2
INFORMATION SECURITY MANAGEMENT
Table of Contents
1. Introduction............................................................................................................................3
2. Discussion..............................................................................................................................4
2.1 Case Study........................................................................................................................4
2.2 Guidelines for Managing Information Security Risks.....................................................5
3. Conclusion............................................................................................................................10
4. Assumptions.........................................................................................................................11
5. References............................................................................................................................14

3
INFORMATION SECURITY MANAGEMENT
1. Introduction
Information security is the proper practice to prevent the unauthorized access,
utilization, disruption, destruction, inspection, disclosure, recording, modification, and
recording of data or information (Crossler et al. 2013). The information security could be
easily utilized regardless of the data form they are taking. The major focus of the information
security is to balance the protection and maintain the CIA or confidentiality, integrity and
availability of the data or information. This focus is maintained on the proper implementation
of policy and thus hampering the overall productivity of organization. The effectiveness of
the risk management plan is checked with the help of this information security (Peltier 2013).
The information security management is responsible for controlling the factors that the
organization requires in implementing the management to ensure that it is properly managing
all the risks. These types of risks could be eventually mitigated with information security
management. The security related issues should be managed with an ISMS or information
security management system. The business operation is eventually secured within this system
(Siponen, Mahmood and Pahnila 2014). All the organizations have adapted this holistic
approach for securing this management and thus obtaining competitive advantages. The
trustworthiness of the information security management of an organization is arranged by
these organizations.
The following report outlines a brief description on the information security
management for the case study of Cosmos newspaper. It is one of the most popular online
newspaper organizations that is located in Sydney, Australia. It comprises of a global
network of various freelance reporters, who are reporting news from all corners of the world.
All the customers, who have an interest in reading these online newspapers or watching the
live video feeds of news, would have to register themselves with this organization with