Information Security Plan for WASSA Swim Association

Running head: INFORMATION SECURITY
Information Security
Name of the Student
Name of the University
Author’s Note:

1
INFORMATION SECURITY
Table of Contents
Executive Summary...................................................................................................................2
Introduction................................................................................................................................3
Discussion..................................................................................................................................3
1. Information Security Plan of WASSA Swim Association.................................................3
2. Risk Matrix of WASSA Swim Association.......................................................................5
3. Classification Table of Information in WASSA Swim Association..................................6
4. Solutions for the Risks Identified for WASSA Swim Association..................................10
Conclusion................................................................................................................................11
References................................................................................................................................12

2
INFORMATION SECURITY
Executive Summary
The main aim of this report is to understand the entire scenario of WASSA Swim
Association. It is a fictitious swimming association that is the peak body for the entire
administration of swimmers within Western Australia for the representation of more than 500
members as well as 5 distinct associated clubs. Information security is the specific state for
protection against the unauthorized utilization of information, especially the electronic data as
well as the measures that are undertaken for achieving this type of security. This is the proper
practice to prevent from all types of issues and problems related to the confidential
information or data. This report has properly described the scale of risk assessment and risk
matrix about the type of information as well as threats category.

3
INFORMATION SECURITY
Introduction
Information security is the significant practice of the prevention of the unauthorized
or unauthenticated access, utilization, disruption, disclosure, inspection, modification,
destruction or recording of any kind of information (Von Solms & Van Niekerk, 2013). This
type of data or information might of any form that is of either physical or electronic. The
most significant focus of the information security is to balance the subsequent protection of
CIA or confidentiality, integrity and finally availability. Hence, a proper and effective policy
is being implemented for hampering the total productivity of any particular organization.
Risk management procedure plays the most vital role in this type of security and hence the
assets, vulnerabilities, potential threats, sources of those threats, possible controls as well as
the potential controls for the efficiency and effectiveness of risk management planning
(Peltier, 2013).
The following report outlines a brief discussion on the case study of WASSA Swim
Association. A proper description of the information security and the various risks related to
the information of this organization as well as the potential impacts and solutions for those
risks would be provided in this particular report. The risk matrix for each and every risk of
WASSA would also be given here with a classification scheme.
Discussion
1. Information Security Plan of WASSA Swim Association
The information security plan of the WASSA Swim Association eventually describes
about the safeguards for the protection of information, data and resources (Peltier, 2016).
There are few reasons for these safeguards in WASSA Swim Association and these reasons
are as follows: