The assess phase should decide the fitting security needs for an organization and which processes are presently in place. Security requirements can vary radically from company to company or institution to institution based, for instance, on dimension, industry or field, regional laws, or regulations. Gathering the necessities of an organization will permit one to define a fitting security process (Capability: Security Process, 2012).
Throughout the identify phase, an organization will look at the tools and procedures presently in place and decide what the security requirements are for their organization. During this phase, one will gather security policies that are presently implied or enforced, in addition to technology components already in use or at their disposal. They will...
In order to set up a successful set of security policies and controls one needs to figure out the vulnerabilities that exist in their computer systems and evaluate the security policies and controls that guard them. This review should include all areas where policies are lacking, in addition to looking at the current policies that are already in place (Capability: Security Process, 2012).
References
Capability: Security Process. (2012). Retrieved from http://technet.microsoft.com/library/bb821260.aspx
