Team Operations

Get Started

1. Initial Team Training.
2. Implement information security management policies and standards.
3. Provide basic awareness training to staff.
4. Conduct an Information Security Risk Assessment.
5. Develop Findings and Recommendations.

Develop the Initial Action Plan

Develop an Initial Action Plan based on the Findings and Recommendations of the Information Security Risk Assessment.

1. What’s to be done in the next 3 months?
2. What’s to be done in the next 6 months?
3. What’s to be done in the next 12 months?

Monthly Meetings to Work the Plan

1. The ISM and Team are to meet on a monthly basis to work the plan.
2. What was planned for the month?
3. What was accomplished?
4. What was the basis for being under/over?
5. What are the plans for next month?
6. What are the rolling plans for the next 3 months, 6 months and year?

 

Contributed by Citadel Information Group
© Copyright 2017. Citadel Information Group. All Rights Reserved.