When is an enterprise$-$wide security audit necessary? Primarily, it serves two key purposes: identifying organizational risks and ensuring compliance. This course emphasizes assessing compliance with organizational standards, while CYB $410$ will concentrate on identifying organizational risks.

Prompt

For this activity, you are part of a team that is assessing your enterprise. Specifically, you must address the following critical elements:

Enterprise Assessment Approach

Explain how you would approach assessing the enterprise

Explain how you would account for people, process, and technology

Describe the information you would need to collect to put the big picture of enterprise security together

Explain what you see as the biggest challenge to this effort