It pays to be secure - but how can we?

Today, I have spent good time in understanding the emergency response plans. Webbed through many sites as below to understand on a best response plan for pandemic alert [say H1N1]. CDC.gov & FLU.gov offered good content. Found good links on placement of portable fire extinguisher and other evacuation plans on OSHA.gov.

Just stumbled on to an interesting site called Roger's Security Blog. Blog shares interesting security information. Wonder how much time do a CSA would spend on blogging!!

Useful Links for ISM

ISACA.org-

• http://www.isaca.org/ - Information Systems Audit and Control Association


• http://www.isaca.org/Template.cfm?Section=Certification&Template=/ContentManagement/ContentDisplay.cfm&ContentID=51252- certifications

US-CERT.gov -

• http://www.us-cert.gov/cas/bulletins/ - vulnerability bulletins

WIKI.org -

• http://en.wikipedia.org/wiki/Business_continuity_planning - BCP


• http://en.wikipedia.org/wiki/Certified_Information_Security_Manager - certification for information security managers


• http://en.wikipedia.org/wiki/Data_privacy - data privacy


• http://en.wikipedia.org/wiki/Enterprise_Risk_Management - ERM


• http://en.wikipedia.org/wiki/ISO_27001 - ISO 27001


• http://en.wikipedia.org/wiki/Risk_management - risk management


• http://en.wikipedia.org/wiki/Sarbanes-Oxley_Act - SOX Act

Other blogs -

• http://passcisa.blogspot.com/ - If you are preparing for CISA then check quick links for FAQs, sample questions, etc.

BCP Links -

• http://www.publicsafety.gc.ca/prg/em/gds/bcp-eng.aspx


• http://www.csoonline.com/article/204450/Business_Continuity_and_Disaster_Recovery_Planning_The_Basics


• http://www.firstsource.com/differentiators/Business-Continuity-Planning.aspx


• http://www.disaster-recovery-guide.com/bcpg.htm

Risk Management -

• http://managementhelp.org/risk_mng/risk_mng.htm


• http://www.iirmworld.org.in/


• http://www.allaboutrisk.com/

Role of Information Security Manager [ISM]

As the Information Security Manager you will take responsibility for developing, maintaining monitoring compliance of all information security policy and procedures. The successful Information Security Manager will perform security risk analysis and risk management, alongside performing security tests and managing internal audits on information security processes, controls and systems. You will take responsibility for developing and maintaining the organization's project disaster recovery and business continuity plans for information systems and monitors changes in legislation and accreditation standards that affect information security. You will provide guidance and consultation on projects for IT Security related risks and issues.

The successful Information Security Manager must be qualified to Degree level in a numerate subject (e.g. Computer Science, maths, engineering) and possess professional level Information Security Certification such as CISA/CISM/CISSP/SSCP. Will possess a minimum of 5 years experience in Information Security Management and be well versed with ISO 27001 accreditation.