Why make it up yourself?
A new company wants to guard its data. It could make up every rule. It would miss things.
Or it could use a plan that experts have tested. Today you meet three such plans.
Key words
| Word | What it means |
|---|---|
| Information security management system | All the rules and controls a company uses to keep data safe. Short form: ISMS. |
| Policy | A written rule for all to follow. |
| Acceptable use policy | A policy that says what people may and may not do with IT. |
| Framework | A ready-made set of rules and steps. |
| Procedure | A set of steps to do a job the same way each time. |
| Function | A job that something does. |
| COBIT | A guide to running IT well. Made by ISACA. |
| SOC 2 | An outside check of how well a firm guards data. |
| NIST | A US body with a well-known guide to cyber risk. |
| Audit | A check by an outsider that rules are followed. |
| Compliance | Following the laws and rules that apply. |
The cells students fill in are left blank in this preview.
By the end of this lesson
Note
I can say what an ISMS does and describe the role of COBIT, SOC 2 and NIST.
Starter: what you already know
Have a go
Starter: what you already know
3 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.
What an ISMS does
An information security management system is all the rules and controls a company uses to keep data safe.
It creates policies. One is an information security policy. Another is an acceptable use policy. They help the company follow privacy and security standards.
COBIT
COBIT helps a company build its own procedures to govern and manage IT. It is made by ISACA, a group of experts.
Use it to ask: who decides? Who is responsible? How do we run IT well?
SOC 2
SOC 2 is a report. An outside audit checks five kinds of control.
They are security, availability, processing integrity, confidentiality and privacy.
Customers ask for it. It shows a supplier guards data well.
Check: ISMS, COBIT and SOC 2
Have a go
Check: ISMS, COBIT and SOC 2
4 questionsYour answers are marked here and are not kept. A college account keeps every student’s marks.