Executive viewpoint on the importance of cybersecurity

Loading...

来自 University System of Georgia 的课程

The Business of Cybersecurity Capstone

22 个评分

University System of Georgia

The Business of Cybersecurity Capstone

22 个评分

课程 4（共 4 门，Specialization Cybersecurity: Developing a Program for Your Business）

This course intends to make the student familiar with information security management. When you have finished with this course you will know more about: • Governance: including the mission, roles and responsibilities of the InfoSec governance function, and the strategic planning process and InfoSec’s role in the organization’s strategic planning effort. • You will understand the various types of InfoSec policies and how effective information security policy is created and used. • Risk management and the risk management process • Certain laws and ethical issues impacting information security in the organization. And some common information security management practices such as benchmarking and performance measures.

从本节课中

Conclusion

In this module, you will synthesize the content in the course, complete a final exam, and complete your Capstone Project.

Executive viewpoint on the importance of cybersecurity2:04

Pulling it all together2:13

与讲师见面

Dr. Humayun Zafar
Associate Professor of Information Security and Assurance
Information Systems
Dr. Traci Carte
Associate Professor Chair, Information Systems
Information Systems
Herbert J. Mattord, Ph.D., CISM, CISSP, CDP
Associate Professor in Information Security and Assurance
Information Systems
Mr. Andy Green
Lecturer of Information Security and Assurance
Kennesaw State University - Department of Information Systems
Michael Whitman, Ph.D., CISM, CISSP
Professor of Information Security
Information Systems

[MUSIC]

Cyber security seems to be a critical aspect of your risk management strategy or

your risk management mission at SunTrust.

How does cyber security fit into your overall mission to safeguard the assets

and the operations of the enterprise?

>> I think you said it absolutely right, even in phrasing the question.

Our clients expect us to safeguard the information, and

frankly their transactions and the money they entrust to us.

Trust is in our name, we're called SunTrust.

The CEO's job is sort of like being captain of a ship.

They have to make sure that things are done safely, correctly and in line with

what our corporate mission is, and if our mission is to help people and clients

prosper financially, and part of that is making sure their information is safe.

As part of that, they make information security paramount in doing that.

And they set up risk management frameworks with the proper level of accountability,

oversight, and cross-checking to make sure it's done right,

and done often, and done correctly, and done all the time.

>> So, would you say that the CEO and other senior leaders played a role

in the evolution and articulation of the risk management strategy,

the governance effort its interest?

>> There is really two sides to it.

First, the CEO sets the imperative.

And it's up to the subject matter experts to figure out how we have to secure these

things for our client and for the business.

They make sure it's done, make sure it's over seeing and

make sure that it's meeting our mission.

>> So part of that would be, and I know that this is a struggle all the time for

security efforts to balance the need to keep things safe with the need to be

effective and efficient as an organization.

So is there a place where that conversation takes place and who has it?

>> Sure, you'd never sacrifice safety for profit, for example.

You always have to balance risk versus reward.

So, we look to standards, we look to subject matter experts,

we look to regulations, we look to the news,

we look to intelligence sources to find out where those balance points are.

[MUSIC]

探索我们的目录

免费加入并获得个性化推荐、更新和优惠。

Coursera 致力于普及全世界最好的教育，它与全球一流大学和机构合作提供在线课程。

© 2018 Coursera Inc. 保留所有权利。

通过 App Store 下载

通过 Google Play 获取