Information Security Management Quartet

Assessing Security Risks

Performing Security Risk Assessment to identify threats, vulnerabilities and impacts.

What are the steps involved?

---

Implementing & Maintaining a Secure Framework

Defining and developing policies, assign responsibilities and apply safeguard measures.

What are they exactly?

---

Monitoring & Recording

Two of the major activities include security incident handling and record keeping.

How should it be done?

---

Reviewing & Improving

Periodic review and security audit.

What are the procedures?