Framework

Framework

1. General description high level

   • In terminology

2. Individual element

   • It's not real
     • For security

3. The management depends

   • Coordinated and effective application, authority, areas of knowledge, areas of competence, areas of competence, areas of practice, enablers and assets
   • Dedication, experience, aptitude and ability of security professional
   • Common basis for a variety of methodologies to compare, align and use in compendium

4. Pretend to support

   • Comparative evaluation
     • Safety assessments
     • Security plans
     • Organization in the SRM capacity

5. SRM areas of knowledge

   • Exposure, risks, resources and quality
   • SRM competence areas
     • Business integration, functional design, application, assurance
     • SRM integration

6. Practice areas

   • Intelligence, protection, security, emergency response and business continuity

7. Guiding Principles

   • 1. Commitment
     • Leadership and commitment of management
       • They drive the process
         • Assign adequate human and financial resources
   • 2. Security throughout the organization and Risk Policies
     • Commitment, declaration and security policy
       • Define and classify sensitive assets
         • According to sensitivity, confidentiality and importance
           • Assign responsibilities
             • Be communicated to all personnel, contractors, suppliers and customers
               • PHVA
   • 3. Strategy, planning and delivery of links
     • Organizations must describe how policies and commitments go
       • All levels of personnel must know the safety risks
         • So that management and personnel can take responsibility for managing security risks
   • 4. Establish and manage at an agreed risk threshold
     • Do not accept unnecessary risks
       • The risks should be treated whenever possible
         • Achieve reasonably with the available resources
           • Accept the risk only when the benefits exceed the cost
             • Make risk decisions at the appropriate level
   • 5. Security of people
     • People are the strongest and weakest links
       • Training programs to communicate responsibilities and disciplinary processes
         • On the proper use of information and corporate systems
   • 6. Physical and environmental security
     • The level of control implemented must minimize the risk of equipment or physical assets
   • 7. Security management operational...
     • Security controls to safeguard all operations and systems
       • Integrity of information, availability and confidentiality
   • 8. Business continuity and resilience
     • Operating environment to be restored or recovered in case of disaster
       • Identification of actions for the continuation of business activities
   • 9. Test
     • Measuring and evaluating performance to enable the organization monitor the effectiveness of the system
   • 10. Measure and review
     • The objectives and scope listed have been met
       • PHVA
   • 11. Document control
     • Establish, implement and maintain procedures to control all relevant documents and data
       • They can be easily located
         • They are reviewed periodically
           • Documents and obsolete data are quickly deleted
   • 12. Warranty
     • Organizational security controls for all assets, processes, systems and infrastructure
       • Comply with any legislative or regulatory obligation