6.3-3 Key Elements of Security Strategy

Question 1

Good Security Strategy:

Answer 1

• Link security to business strategy: balanced approach
• clear, written policies: assign responsibilities
• procedures for user authentication and passwords: confirming a user’s identity
  . something you know
  . something you have
  . something you are
• procedures for user authorization: what users can see and do
• monitoring usage: working as intended
• updated regularly
• maintaining a disaster recovery plan with regular testing
• competent security personnel
• monitoring the tech scene and developments
• procedures for social media, cloud computing, mobile