Question Locked

Implementing Security on my firm

0 helpful
3 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I'm in charge of this new project. Currently we have somebody else who takes care of security services. SO the project consists to bring security in house. At first i have to contact a consultant to come and help us for 2 months at least ... but how do i start this project, i'm junior at this and i'm greathful that i can run the show (sort of speak) but i need a boost on how to start this project.

Thanks

3 replies

by gadgetgirl

I'm in the UK, working in the health sector, and you haven't stated what type of business you're in but you could do worse than following the guidelines given in ISO 27001. It applies to every sector of every type of business.

http://www.27001-online.com/

This is a great guide as to how to apply Information Security, including best practices, awareness training etc. I've worked to this particular standard ( i.e. its' predecessors!) for nearly 10 years now, and by starting with an ISMS, it's fairly easy for you to decide where exactly you want to go with this, and it also enables you to explain things more effectively to a project team. It's sort of the glue that binds all parts of security together.

Have a look at the website and see what you think - if you need any help with it, feel free to pm me anytime.

GG

by Member 30343301

Thanks for the info. Now with that i don't have the necessity to hire a vendor or contractor? i think for now we are going to need only Security management, Infrastructure and Operational security and business continuity management.
See i was thinking to hire a vendor and work with them for like 2 months or so and then take over (whatever take over means)But since im a junior at this i dont know. And i want to do good in this project because that can open the doors to the info sec world.
Please advice

Regards,

Chris M

This discussion is closed to new replies.