ITEC 6610: Information Assurance and Risk Management Report Analysis

This report provides an overview of information assurance and risk management, focusing on disaster recovery and business continuity planning. It explores key concepts like confidentiality, integrity, and authentication, along with the importance of end-user awareness and training. The report references various resources, including Brotby's work on risk management objectives, Hawkins et al.'s paper on disaster recovery planning, and the ITEC 6610 weekly summary. The report also highlights the significance of incorporating security into the overall IT system and communicating solutions to stakeholders. Furthermore, it touches upon the need for change management practices and tools to address gaps in Identity and Access Management (IAM). The report concludes by emphasizing the importance of information assurance for business success and the protection of user data.

Information
Assurance and
Risk

 Assurance means to declare a positive
statement generally against a certain
system and its intention is to provide trust
and reliability.
 Information Assurance is
• systematic practice of some sort of
modeling of assurance that serve as a
guarantee for numerous systems.
• managing the information risks for example
confidentiality and integrity.
Information Assurance

 Information assurance is based on triad of
certain countermeasures.
 Triad is the defense in depth model.
 The obvious and at the same time
expensive countermeasure is the
technology involved.
 The technology consists of everything from
the operating systems to the routers and
electronic intrusion systems used for
detection.
Information Assurance andEnd
User

 From the perspective of an end
user awareness and adequate
training are the vital
countermeasures.
 In U.S. the government said that
all the federal employees making
use of sensitive systems should
receive regular training.
Guideline for the users

 Illustrating the need for training and
education.
 Information Assurance are the
measures that help in protecting and
defending information.
 The measures include restoring
information systems by the help of
reaction capabilities, detection and
incorporating protection.
Awareness Training End User
Solutions

 Availability - The property of availability is the
ease with which it is accessed and used.
 Integrity - The property by which a certain
entity will not have been modified in any such
unauthorized manner.
 Authentication - The process that is used for
verifying any identity.
 Confidentiality- The property in which the
information is prevented from getting
disclosed to the system entities.
Some important terms related
to Insurance Assurance

 Management of risk.
 Training and professionalism of the
workforce.
 Issue-specific and at the same time
system-specific policies.
 Monitoring, managing and administrating.
 Assessing and auditing.
Some aspects of Insurance
Assurance

Importance for success in
business.
Certain element of fashion
plays a vital role in the use of
the term information
assurance in this context.
Information Assurance managing Information
Security

Failures of System
Flaws in Security
 Issues with performance
Problems in compliance
Poor Code Quality
Risks associated with
Information Assurance

Information assurance
security primarily focuses on
information in its digital form.
Information assurance is
important to the organizations
as it ensures that the user
data is kept protected.
Conlusion

 Park, I., Sharman, R., & Rao, H. R. (2015). Disaster
experience and hospital information systems: An
examination of perceived information assurance,
risk, resilience, and his usefulness. Journal of
Consumer Research, 12(4), 382-405.
 Knechel, W. R., & Salterio, S. E. (2016). Auditing:
Assurance and risk. Routledge.
 Such, J. M., Gouglidis, A., Knowles, W., Misra, G., &
Rashid, A. (2016). Information assurance
techniques: Perceived cost
effectiveness. Computers & Security, 60, 117-133.
References