1. Why is administrative management so important when it comes to security opera
ID: 3673782 • Letter: 1
Question
1. Why is administrative management so important when it comes to security operations?
2. What is collusion? How can we prevent or place preventative controls to help stop or mitigate collusion
3. Should the information technology department and information security department operate separately? Or should they be in the same department? Why or why not?
4. What are the differences between information technology governance and information security governance? Are their purposes different? If so are they leading towards the same outcome? What would that be?
Explanation / Answer
1. Administrative management importance in security operations
Administrative management plays a important role in security operations. Security operations
inclues people security, smooth running of organization functions, security of organization
assests. These operations are basically governed by administrator, that is why administrative
management is important, as good the management is, as smooth the security operations be.
2. Collusion, and How to prevent or Mittigate it.
In an organization collusion can be happen between the employees or between higher management and the
employees. It doesn't matter which type of collusion it is, its main purpose is to impact organization
business. To prevent or to mittiage collusion there should be transparence between the higher management and
the employees. Organization should arrange team building activities time to time, so that employees can
know each other well, that will reduce and will prevent collusion.
3. Should the information technology department and information security department operate separately? Or should they be in the same department? Why or why not?
Information security department is basically the subset of information technology department. If the organization is small then these two departments can be merged but if oraganization size is large, or you can say IT related works is enough then its better to keep them seperate.
4. information technology governance and information security governance
Infromation technology governance looks for all the IT related operations, but information security governance looks for IT security related issues. The scope of work for IT governance is bigger than IT security governance. In some oraganizations there is only on governance that is IT governance that take care of IT security related governance too.
Related Questions
Navigate
Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.