Information Security Plan for a Small Media Business
This paper presents a comprehensive information security plan for Pixel Inc., a 100-person media production company specializing in short animations for advertising clients. The plan begins with a preliminary assessment of the company's hardware infrastructure — including desktops, servers, and network equipment — and identifies its key digital and physical assets. It then categorizes security risks by priority, addressing external network intrusions, industrial espionage, internal social threats, and accidental data loss. The document outlines specific countermeasures across four domains: network fortification, employee education, internal access controls, and disaster recovery. A 30-day implementation timeline, assigned responsibilities, and a projected budget round out the plan.
- Company Overview and Plan Scope: Introduces Pixel Inc. and plan applicability
- Preliminary Infrastructure Assessment: Inventory of desktops, servers, network, and assets
- Risk Identification and Priorities: Four threats ranked by risk level and priority
- Security Measures and Controls: Network, education, internal, and disaster controls
- Implementation Timeline and Responsibilities: 30-day phased rollout with assigned tasks
- Resources and Budget: Software, hardware, and offsite backup costs
✍️ How to write this paper — guide, tools & examples ▾
What makes this paper effective
- The plan follows a logical progression from asset inventory to risk assessment to specific countermeasures, giving it a professional, actionable structure typical of real-world security documentation.
- Risks are clearly ranked by both likelihood and priority, helping the reader understand why certain controls are addressed before others.
- The inclusion of a concrete 30-day timeline and budget section moves the document beyond abstract policy into practical planning territory.
Key academic technique demonstrated
The paper demonstrates applied risk-tiering: each identified threat is assigned a risk level (High/Low) and a priority level (High/Medium), and the security controls are then sequenced to address the highest-priority items first. This structured alignment between risk analysis and remediation planning is a foundational technique in information security management frameworks such as NIST and ISO 27001.
Structure breakdown
The document opens with a scope statement, then moves through six numbered sections: infrastructure inventory, risk and priority analysis, the four-part security plan (network, education, internal controls, disaster recovery), a phased implementation timeline, and a resource/budget overview. Each section builds directly on the previous one, creating a clear cause-and-effect chain from vulnerability identification to remediation action.
Company Overview and Plan Scope
Pixel Inc. is a 100-person business dedicated to the production of media — most specifically short animations — for advertising clients worldwide. Personnel include marketing specialists, visual designers, video editors, and other creative staff.
This security plan encompasses both the general and practical characteristics of the security risks expected for the business, and the specific actions that aim, first and foremost, to minimize such risks. Where full prevention is not possible, the plan also addresses how to mitigate damage should a security breach occur.
The measures and assigned responsibilities stated in this document apply to all departments within the company. Exemptions may be granted, but only under the prerogative of the CEO in consultation with the Chief Security Officer, who will be formally assigned after the finalization of this document. Otherwise, no exceptions to the security measures stated here will be permitted.
Create your account
Always verify citation format against your institution’s current style guide requirements.