MPhil in IT Governance

Information Security Management

RISV$502$

Assignment $2$

July $2024$

Due Date: Sunday, $14$ July $2024$

Submit your completed assignment through the Learn System

Page $2$ of $2$

ASSIGNMENT $2$

You have been seconded to the Information Security Department of your enterprise

from the beginning of this year. Your Chief Information Security Officer $($CISO$)$ asked

you to attend a two$-$day online workshop $[2$ & $3$ July $2024]$ on how to design and

implement an Information Security Management System $($ISMS$),$ presented by Mobius

Academy, in Gqeberha.

Having completed the ISMS workshop, your CISO asked you to draft a motivation of

maximum $10$ A$4-$pages addressing the following:

$$ why an ISMS is necessary to protect your enterprise$$s information assets,

$$ a description of what the eleven$-$step Mobius ISMS Development and

Implementation Process entails, and

$$ a motivation of whether the Mobius ISMS Process is suited to be used in your

organisation.

You should do the following:

a$)$ Describe the nature of your enterprise, the type of business or services your

enterprise renders and the structure or organisation of your ICT function in the

enterprise $($Max $1$ page$).$

b$)$ Provide an Executive Summary of the motivation of what an ISMS is$,$ why it can

address the enterprise$$s information security management concerns and how an

ISMS can typically be implemented $($Max $2$ pages$).$

c$)$ In addressing the $$how an ISMS can typically be implemented$,$ propose the

Mobius ISMS Development and Implementation Process as a possible

methodology to be followed to design and implement an ISMS in your enterprise.

This proposed methodology must be contextualised with the description of your

enterprise, described above in a$).$

Provide adequate detail of how each step in the Mobius Process will be

implemented. Again, this detail must be contextualised for your environment.

Ensure that you identify and emphasise the critical aspects to address and to

control the success of the ISMS implementation $($Max $7$ pages$).$