Information Systems Support: Risks and Efficient Security Program

Running head: INFORMATION SYSTEMS SUPPORT 1
Information Systems Support
Name
Institution Affiliation

INFORMATION SYSTEMS SUPPORT 2
Make a chart to show all risks to the information system including from inside or
outside the system, to hardware and software, and to the network, level of risk, and
possible solutions that could be instituted digitally, physically or through policy.
Features of an efficient security program
A dynamic security system offers an extensive outline on how the organization will ensure its
data is secure. Accordingly, this process calls for a holistic approach which describes the way
each part of the organization is included in the program (Perlman, Kaufman, & Speciner,
2016). It should be noted that a security program is not about the process of handling a guide
which provides details regarding things to be undertaken in case there is a breach in security.
Some of the components to ensure data security include:
Risk assessment: This process entails evaluation and identification of risks facing the security
program with the intention to control. Indeed, this is the most crucial part as the company has
to think about all risks that the organization is facing to decide on the suitable and
inexpensive approach to handle these risks. It has to be noted that risks can only be reduced
and not eliminated (Saxe, & Berlin, 2015). Thus, the assessment process aid to give priority
to risks by choosing on cost-effective countermeasures to control the risk.
Designated security officer: Most of the security standards and regulations calls for a
designated security officer (DSO) as a necessity. The organization’s security officer is tasked
with the responsibility to coordinate and running all security programs. This officer is the
organization’s internal check and balance whose role is to report to external IT to enhance
independence.
Administrative security awareness: According to the security agency it is agreed that the
weakest connectivity in most firms’ security is a human factor and not technology. While it is
the lowest connection, in most cases it has been overlooked by security programs.