Question

The company decided to hire you to be its new Director of Information Security.

1. Explain ten security policies, procedures, and/or technologies you would put into place during your first year on the job. For each strategy, you must explain one type of security problem that the strategy would attempt to prevent. The security problem does not have to be from the list provided above.
2. list six things that should be included in a disaster recovery plan for The Insurance Company

Answer 1

Following strategies could be implemented to ensure information security:

1) We could make a pool of authorized and unauthorized systems , so that it became easier to identify who is eligible to access company's data and deny access to other unauthorized systems.

2)We could make a pool of authorized and unauthorized softwares , so that it became easier to identify the trusted and untrusted sources while retrieving data.

3)Ensure all the hardware , software and other devices being used in the system follow the established security guidelines followed globally and could probably ensure that everyone in the organisation is using only the globally certified devices.

4) We should ensure to have a regulatory audits regarding the security standards being followed in the organisations by the certified security companies to have a checkup on any kind of threat being prevailing.

5) We could limit the powers of administrative privileges , to ensure there is no data coming in the company's local network with going through the security check procedure.

6)we could pick the most feasible cyber insurance plan for the organisation to ensure recovery in case of any cyber disaster.