Comprehensive Information Security Compliance Plan Presentation

This presentation outlines a comprehensive information security compliance plan, covering strategic, managerial, and technical aspects. It begins with an introduction to an organization, detailing its industry, employee count, and revenue. The strategic section addresses leadership and governance, including overall strategy, IT governance, and risk assessment, identifying primary risks. The managerial and operational section covers security management, legal and regulatory requirements, security policies (policies, procedures, standards, and guidelines), security program management (monitoring, audit, compliance, controls, and vendor management), and user security management (education, training, ethical conduct, and privacy). The technical section focuses on technology protection and operations, including asset inventory and management, incident management, technical operations, physical and environmental security, and disaster recovery/business continuity. The presentation also includes an overview of organizational data breaches, relevant criminal statutes, key stakeholders, types of data at risk, and regulations like COPPA, CIPA, FERPA, and laws governing financial industries, mobile payments, and state laws.

References
Chan, A. (Ed.). (2011). Walmart in China. Cornell University Press.
Wu, Y., Feng, G., Wang, N., & Liang, H. (2015). Game of information security investment: Impact of
attack types and network vulnerability. Expert Systems with Applications, 42(15-16), 6132-6146.
Hwang, M. S., Wei, C. H., & Lee, C. Y. (2009). Privacy and security requirements for RFID applications.
Journal of Computers, 20(3), 55-60.
Hovav, A., & Gray, P. (2014). The Ripple Effect of an Information Security Breach Event: A Stakeholder
Analysis. CAIS, 34, 50.
Greenaway, K. E., Chan, Y. E., & Crossler, R. E. (2015). Company information privacy orientation: a
conceptual framework. Information Systems Journal, 25(6), 579-606.
Hughes, A. (2015). Retailers, corporate ethics and fair trade. In Handbook of research on fair trade.
Edward Elgar Publishing.
Choi, T. H., & Pae, J. (2011). Business ethics and financial reporting quality: Evidence from Korea. Journal
of Business Ethics, 103(3), 403-427.
Parboteeah, K. P., & Cullen, J. B. (2013). Business ethics. Routledge.