Question

You are going to begin the process of data gathering. There are three types of data you will be gathering – Administrative, Technical and Physical. For this assignment, you will be gathering your administrative data. This data will be created by you for your fictitious company. You may use as many resources as you need in order to develop this data. The Internet, data from real companies, and data you just make up on your own may be used. Areas of data that need to be gathered are as follows:

• Human Resources
  • Recruitment – steps for hiring new employees
  • Employment – policies and procedures employees must follow
  • Termination – steps for terminating employees
• Organizational Structure
  • Senior Management – how is the senior management structured
  • Security Program – how is this structured. What are the components and policies and procedures
  • Security Operations – what are the policies and procedures and how is this structured
  • Audit – how are these performed and how often
• Information Control
  • User Accounts – what is the process for creating and managing them
  • User Error – how is this tracked and what happens in the event of user error
  • Asset Control – how are assets protected, assigned value and monitored
  • Sensitive Information – what sensitive information exists, how is it protected and what are the policies and procedures
• Business Continuity
  • Contingency Planning – do they have it and how is it managed
  • Incident Response Program – do they have it and how is it managed
• System Security
  • System Controls – what are they and do they need to be improved
  • Application Security – what is in place and is it effective
  • Configuration Management – what do they have in place, what are the policies and procedures and how often is it updated
  • Third Party Access – who has access to any of the assets and how is it controlled

All of the above information will be documented in the risk assessment. In some cases it will be tested and questions to appropriate personnel will be asked.

Answer 1

  DATA GATHERING FOR MY COMPANY

Gathering the data about company makes us to understand how the things will workout in our organization.In a company employment plays an important rule.

Following topic we need to cover:

1.HUMAN RESOURCES: In Human resources process includes recruitments,employment and termination.

1.RECRUITMENT: Recruitment involves in hiring an employ for our company.Reviewing,screening and shortlisting the right candidate.It is a basic and first step in creating the powerful base.  

2.EMPLOYMENT: It is process of employing a better and skilled person for a particular place and getting them paid for their work.

3.TERMINATION: It is process of terminating the work of employ and stopping their work.It is also a step in recruitment,any person not eligible for a place they will get terminated there will be no further steps for recruiment.

2.ORGANISATIONAL STRUCTURE: Following will be involved.

1.SENIOR MANAGEMENT: Senior management people involves in high ranking and experienced people,who work and manage the company.They will work and establish the company goals and try to reach it.

2.SECURITY PROGRAM AND OPERATIONS: Security of employes will be taken care by the comapany officials.when it comes to senior management, there will be more secure policies compared to other.As the company need leadership qualities to balance the other employess to make them work on the same track.senior makes an crucial rule.

3.AUDIT: Audit is a financial report of a business in a company.There are also chances of fraud in a company.

3.INFORMATION CONTROL:

1.USER ACCOUNTS: These involves the information about employes who works in the company.We need to create a document or an application to be filled information by a person who wants to work.Agreement should be made at the starting of recruitment process.

2.USER ERROR: If there any errors or fraud informations is found by an organisation,then they should face severe consequences,basic penalty will be there.

3.ASSET CONTROL: Asset should be controlled,create a basic budget plan,we need to track the expenses.And pay the debts.saving money and planing every step of a financial goals.

4.SENSITIVE INFORMATION: There will be sensitve(secure) information which is hidden from the external organisation.It should be kept in safer and trusted hands. Encryption of shared data between the clients and employees is mandatory. Use of digital Signatures to access the sensitive content must be implemented.

4.BUSINESS CONTINUITY: Business Continuity requires various procedures to deal with. Planning is evaluated based on requirements of business.Validating the previous data pattern of a business planning, identify the basic mistakes of planing and try to comeup with the better planing to satisfy the client needs.

5.SYSTEM SECURITY: System security is needed to update data of the business monthly or annually.Strategies and planing of a business must be implemented.Every year a business comeup with a new ideas,procedures and policies.we need to keep it securely.Third party plays vital role in business,he helps to communicate and improve the business planing with other business or an organisation.Information and data of a business is shared with only a trusted third party.So he helps to manage and develop the ideas.In every step of business balance and secure planing of work should be maintained for better growth of business,that's how managing the business will be progressed.

we need to follow the basic steps to collect and gather the data of a business to satisfy and reach its goals.