IT security risk management approach
The Security Advisory group (SAG) has devised a new IT security management approach to tackle the increasing threats of cyber crime on a large scale. This security management approach has been simply named as Security Risk Management (SRM). The team involved in this security management approach comprises of the financial, logistical, security focal points, top level managers as well as the national staff representatives. The main goal of the security programme is to approve the program as well as successfully take the initiatives of tackling the threats of cyber crimes along with the enhancement of the safety and security of the staffs, assets and the managerial tasks.
The SRM is an analytic tool which is involved in the assessment of the risks of undesirable occurrences which may affect the smooth working of any organisation. It also takes the initiative of educating all staffs and guiding them at the same time to implement solutions related to mitigation and measures with the goal of minimizing the risks of cyber crimes. An important component of this approach is Security Risk Assessment (SRA). This includes tasks like decision making process in terms of security concerns and much needed enforcements, planning and implementing the security measures to achieve the set goals. It is a tool which is updated from time to time as newer technological developments are available to the world.
Hence, it can be concluded that the SRM procedure empowers an institutionalized and adaptable methodology to the behaviour and verbalization of a
SRA, which is a pragmatic apparatus that could be used for profound field, nation, and headquarter areas. It ought to be ready by prepared security faculty in collaboration with the fitting nation and HQ administration structures to address key security central focuses. It is a notable and separate some piece of the methodology, which is central to arranging. The Program Assessment must be created as a shared exertion between the capable nation chiefs, program executives, and national staff parts (typically the project officers) who will direct the projects and security, consultants (counting security officers where present) to guarantee mainstreaming of security at all levels of work.
“Security Risk Management”. NGO Approach. EISF, 2009.
Baracudda. “Security management - The key to more security and efficiency”. Baracudda Networks Inc. 2010.