part 2 phd chris

 

The information security strategic plan and security policies are strongly interrelated within an organizations information security program. The security plan and security policies will drive the foundation and selection of security controls to be implemented within the organization.

Part 1

Write a 1- to 2-page summary of the comparison chart of strategic plans and security policies you completed in this weeks Learning Team assignment.

Part 2

Review the control families described in this weeks reading, NIST SP 800-53a Revision 4, Assessing Security and Privacy Controls for Federal Information Systems and Organizations.

Review the controls from this weeks reading, CIS Controls V7.1.

Develop a 2- to 3-page matrix using that accurately maps CIS controls to NIST security control families. Note that some CIS controls may map to multiple NIST control families.

Cite all sources using APA guidelines. A minimum of three academic sources is required for this assignment.