Information management system

1. INSTITUTE OF RURAL MANAGEMENT
SUBMITTED TO – SUBMITTED BY --
Dr. PANKAJ GUPTA URVASHI CHANDALIYA
ADITIYA MISHRA
AJAY BABBAR

2. Information security management
Information security management

3. Information security management
describes the set of policies and
procedural controls that IT and
business organizations implement
to secure their informational assets
against threats and vulnerabilities.
Many organizations develop a
formal, documented process for
managing InfoSec ,called an
Information Security Management
System, or ISMS.
Defination -

4. a) ISM developed in response to increasing enterprise data
collection over the past decade, along with the increasing
threat of cyber attacks and data breaches.
b) Many organizations develop a formal, documented process
for managing InfoSec — often called an Information Security
Management System, or ISMS.
c) Depending on your industry vertical, information security
management might be a legal requirement to safeguard
sensitive information that you collect from customers.
d) Responsibility for information security may be assigned to
a Chief Security Officer, Chief Technical Officer, or to an IT
Operations manager whose team includes IT operators and
security analysts.

5. What is an informational asset?
Nearly all organizations possess information that they
would not want shared or publicized. Whether these data
are maintained in digital or physical format, the discipline
of Information Security Management is critical to protecting
the data from unauthorized access or theft.

6. 1. Strategic Documentation
2. Products/Service Information
3. Intellectual Property/Patents
4. Proprietary Knowledge/Trade Secrets
5. Employee Data
Informational asset --

7. Three objectives of information security
management
1. Confidentiality - When it comes to InfoSec, confidentiality and
privacy are essentially the same thing. Preserving the confidentiality
of information means ensuring that only authorized persons can
access or modify the data. Information security management teams
may classify or categorize data based on the perceived risk and
anticipated impact that would result of the data was compromised.
Additional privacy controls can be implemented for higher-risk data.

8. 2. Integrity - Information security management deals
with data integrity by implementing controls that ensure
the consistency and accuracy of stored data throughout
its entire life cycle. For data to be considered secure, the
IT organization must ensure that it is properly stored and
cannot be modified or deleted without the appropriate
permissions. Measures such as version control, user
access controls and check-sums can be implemented to
help maintain data integrity.

9. 3. Availability - Information security management
deals with data availability by implementing processes
and procedures that ensure important information is
available to authorized users when needed. Typical
activities include hardware maintenance and repairs,
installing patches and upgrades, and implementing
incident response and disaster recovery processes to
prevent data loss in the event of a cyber attack

10. ANY QUESTION….