Cyber security risk management practices in large organizations

The use of motorized information systems has come an integral part of South African secondary seminaries, bringing about a host of information security challenges that seminaries have to deal with in addition to their core business of tutoring and literacy. seminaries handle large volumes of sensitive information pertaining to preceptors, learners, creditors and fiscal records, which they're obliged to secure. Unfortunately, academy operation and druggies aren't apprehensive of the pitfalls to their information means and the impacts of a concession thereof. Motorized information systems are susceptible to both internal and external pitfalls but ease of access is likely to manifest in security breaches, thereby undermining information security. One way of informational seminaries about the pitfalls to their motorized information systems is through a threat operation program. seminaries may not have the full capacity to perform information security threat operation exercises due to the attainability of threat operation experts and scarce fiscal coffers. thus, the ideal of this paper is to educate secondary seminaries operation and druggies on how to perform a threat operation exercise for their computerized information systems in order to reduce or alleviate information security pitfalls within their information systems and cover vital information means. This study uses the Operationally Critical trouble, Asset, and Vulnerability Evaluation for small associations (OCTAVE-Small) threat operation methodology to address these information security pitfalls in two named secondary seminaries.

کلیدواژه ها:

computerized information systems ، risk ، vulnerability ، risk management ، information security