Lab Exercise 7:

a) Indicate necessary steps you need to make.

b) Indicated documents you need to produce.

c) Map what will you plan be for Strategic Plan,Tactical Plan and Operational Plan

d) Draft elements of Issue-Specific Security Policy.

Just last week, agricultural megacorp has confirmed that it has fallen victim to a ransomware infection that reportedly shut down some of its North American production plants. In a statement posted on its website, the produce giant said it "recently experienced a cybersecurity incident that has been identified as ransomware," adding that the impact to operations was "limited." CEO of the company decided to contact your company as Information Assurance consultants to assist them in digital transformation Information Assurance Model and increased danger of cyberattacks. Your assignment is to apply integrated Information Assurance model (CNSS or MSR Model) on this organisations. After your initial report, the CEO will decide if you are the best option for their company. The UAE IA Regulation promotes a lifecycle approach for establishing, implementing, maintaining and continuously improving information assurance. This lifecycle approach ensures continual improvement of the UAE's information assurance capabilities based on well-defined activities: a. Understanding an entity's and / or sector's information security requirements and the need to establish a policy and objectives for information security b. Conducting risk assessments, identifying appropriate risk treatment actions, and selecting controls to manage the risks c. Implementing and operating security controls to manage information security risks in the context of the entity's or sector's overall business risks d. Monitoring and reviewing the performance and effectiveness of the information security processes and controls e. Ensuring continual improvement based on objective measurements The continuous improvement aspect of the IA lifecycle ensures that IA capabilities are continuously adapted and evolved in line with changing requirements. The application of the IA lifecycle is facilitated best when integrated in the planning and governance activities of an entity or sector