Name_CS654_IP4

Security Management Plan 1 CS654 – Security Management Security Management Plan – IP4 First & Last Name 11/06/2023

Security Management Plan 2 Table of Contents 1 PROJECT OUTLINE (WEEK 1) ............................................................................................................ 4 2 SECURITY REQUIREMENTS (WEEK 1) ............................................................................................... 6 2.1 R ISK A SSESSMENT .............................................................................................................................. 6 2.2 P OLICIES AND P ROCEDURES .................................................................................................................. 7 2.3 A CCESS C ONTROL ............................................................................................................................... 7 2.4 S ECURITY A WARENESS T RAINING ........................................................................................................... 7 2.5 I NCIDENT R ESPONSE P LAN ................................................................................................................... 7 2.6 D ATA B ACKUP AND R ECOVERY .............................................................................................................. 7 2.7 V ENDOR M ANAGEMENT ...................................................................................................................... 8 2.8 R EGULAR A SSESSMENTS AND U PDATES ................................................................................................... 8 2.9 I NCIDENT R EPORTING AND C OMMUNICATION .......................................................................................... 8 2.10 C ONTINUOUS M ONITORING AND I MPROVEMENT ...................................................................................... 8 3 SECURITY BUSINESS REQUIREMENTS (WEEK 2) ............................................................................. 10 3.1 CMMI O VERVIEW ........................................................................................................................... 10 3.2 T HE P ROCESS - I MPLEMENTATION ....................................................................................................... 11 4 SECURITY POLICY (WEEK 3) ........................................................................................................... 14 4.1 A CCESS C ONTROLS ........................................................................................................................... 15 4.2 A UTHENTICATION AND A UTHORIZATION ................................................................................................ 15 4.3 N ETWORK S ECURITY ......................................................................................................................... 15 4.4 P HYSICAL S ECURITY ........................................................................................................................... 15 4.5 D ATA P ROTECTION ........................................................................................................................... 15 4.6 I NCIDENT R ESPONSE ......................................................................................................................... 16

Security Management Plan 3 4.7 S ECURITY M ONITORING ..................................................................................................................... 16 4.8 E DUCATION AND T RAINING ................................................................................................................ 16 5 SYSTEM DESIGN PRINCIPLES (WEEK 4) ........................................................................................... 18 5.1 P RINCIPLES OF D EFENSE IN D EPTH ....................................................................................................... 18 5.2 P RINCIPLE OF L EAST P RIVILEGE ............................................................................................................ 18 5.3 P RINCIPLE OF S EPARATION OF D UTIES .................................................................................................. 19 5.4 P RINCIPLE OF R ISK A SSESSMENT .......................................................................................................... 19 5.5 P RINCIPLE OF C ONTINUOUS M ONITORING ............................................................................................. 19 6 THE TRAINING MODULE (WEEK 5) ................................................................................................. 21 REFERENCES ........................................................................................................................................ 22

Security Management Plan 4 1 Project Outline (Week 1) For this comprehensive security management plan, the selected organization is a hypothetical home health care provider, Collins Home Health Care. Collins Home Health Care is a large organization providing home health care services to homebound patients across the state of Louisiana, Mississippi, and Alabama. The organization provides a range of services including physical therapy, nursing care, and home health aides. Collins Home Health Care currently have 500 employees, including nurses, physical therapists, home health aides, administrative staff, and an information technology group. Collins Home Health Care has a large network of healthcare providers, including hospitals, clinics, and social services organizations, as well as a network of home health care providers throughout the southern area. Collins Home Health Care is a complex organization that requires a comprehensive security management plan to ensure the security of its employees, patients, and data. Collins Home Health Care is committed to protecting the safety and security of its patients, employees, and data. The organization has identified the need to develop and implement a comprehensive security management plan to ensure the security of its operations and data. Collins Home Health Care is committed to developing a comprehensive security management plan that will address all aspects of security, including physical security, information security, and personnel security. The organization's security management plan will be designed to protect the safety and security of its employees, patients, and data. The organization has identified the need to develop and implement a comprehensive security

Security Management Plan 5 management plan that will address the Collins Home Health Care security concerns and the propose needs and changes to ensure the security of its operations and data. Collins Home Health Care will use this Comprehensive Security Management Plan to assess its security concerns, develop and implement an effective security management plan, and ensure the safety and security of its employees, patients, and data.