Security Management and Governance for Power AI

Running head: SECURITY MANAGEMENT AND GOVERNANCE
Security Management and Governance for Power AI
Name of the Student
Name of the University
Author Note

1SECURITY MANAGEMENT AND GOVERNANCE
Table of Contents
Introduction................................................................................................................................2
Part A:....................................................................................................................................2
Benefits derived from seeing Security Management as an on-going process....................2
Reasons for having a policy...............................................................................................3
Development of a Security Policy and Security Management Plan..................................4
Identification and description of the functions, tasks, roles and responsibilities that need
to be defined for the Security Management Program for PIA...........................................5
Roles of different individuals/groups would play in terms of governance in general.......6
Identification of any models or methods that may be relevant for the development of a
Security Management Program..........................................................................................7
The implications of legal and statutory requirements and the benefits your formal
approach would bring.........................................................................................................7
Part B:.....................................................................................................................................8
The benefits a Risk Management Plan can bring to a company........................................8
The steps necessary to build a Risk Management Plan......................................................9
Discussion on the importance of Contingency Planning to PIA........................................9
Discussion on the risk analysis and CBA........................................................................10
The threats, vulnerabilities, and attacks that your formal plan would manage................10
The responsibility for the user and the vendor.................................................................10
Conclusion................................................................................................................................11
References................................................................................................................................12
Appendix..................................................................................................................................14
Appendix I............................................................................................................................14
Appendix II..........................................................................................................................16

2SECURITY MANAGEMENT AND GOVERNANCE
Introduction
Security and governance policy in any organisation is considered as the strategy for
the company to help in reduction of risk and another raised access to the technology e r the
information technology systems and information generated from the business. The enterprise
security governance and its activities are mostly involved with the institutionalization,
development, improvement and assessment of an organisation regarding its risk management
and security policy. It was determined how the different personal, business unit, staff and
executives is required to work together for the protection of the digital assets of the
organisation to ensure that there is no data loss while at the same time help in protecting the
reputation of the organisation from the public. Here, Power AI is an organisation mostly
focused on developing software for industrial business purpose and residential use. The focus
is mostly developed on the artificial intelligence system for controlling power use, storage
and also helps in generating various environments (Tang & Zhang, 2016). There are many
unique solutions from the applications developed by the company and it is required that all
these designs need to be protected.
Part A:
Benefits derived from seeing Security Management as an on-going process
The primary goal of the information security governance is helping the business
organisation to achieve all the security objectives it is trying to reach. This is done because
every organisation needs to determine the strategy that would work for the specific goals of
the organisation according to the requirements of the company. It is not that the security
governance would be a flexible one and the implementation of one kind of information
system governance would fit every organisation (Fazlida & Said, 2015). Therefore, it is

3SECURITY MANAGEMENT AND GOVERNANCE
required that the organisation's description and requirements would be analysed to make sure
what benefits it would have information security governance. If implemented properly, the
following would be the benefits of information security governance strategies:
 It would provide the organisation with a much effective and reliable strategy
for improving the security of the data as well as enhancing its reliability,
accessibility, security, integrity and quality. The effective information security
governance strategy would involve a set of rules and responsibilities. This
affects the types of data flowing through the organisation even after the
implementation of the strategy.
 These strategies are able to accept the intelligence of the business using
critical success factor of the data driven Enterprises. PAI is also a data driven
organisation and this is why it is obvious that they would access the critical
business intelligence for every authorised user (Al-Hila et al., 2017).
 It enhances improve collaboration, data sharing and decision making for the
organisation and enhances the success rate of the business running at this point
of time.
 The information lifecycle of the streamlined data within the organisation gains
more value having an authentic, easily accessible and high-quality data.
 The entire strategy is much more cost-effective and reduces the effect of risk
within the organisation.
Reasons for having a policy
It is essential that the organisation utilizes the consultancy for setting up a strong
information governance Framework that has rules within the organisation and responsibility
setup in a well define manner so that the essential practice within the entire organisation for