Administrative Issues

Question 1

What is a security officer(SO)?

Answer 1

A person responsible for information security in an organization.

Question 2

What is the role of a security officer(SO)?

Answer 2

• Defines a corporate security policy
• Defines system-specific security policies
• Creates project plan for implementing controls
• Responsible for user awareness and training programs - Appoints auditors

Question 3

Where is the security officer(SO) placed in an organisation’s hierarchy?

Answer 3

SO should report to the highest level of control (board of directors, CEO)
SO acts as an intermediary between management and the user base

Question 4

Why is it sometimes hard for the SO to secure support form high-level management?

Answer 4

• Ignorance of real nature of risks
• Fixated on bottom line (security costs money, no clear benefits)
• Fear of having to address unknown risks and take responsibility