Line of Business LOB Security Plan

1
Line of Business (LOB) Security Plan
2
Line of Business (LOB) Security Plan

• Agenda
• Type of Organization the LOB Security Plan is
  Geared Toward
• What the LOB Security Plan Should Entail
• The Purpose of the LOB Security Plan
• LOB Security Plan Responsibilities

3
The Type of Organization the LOB Security Plan Is
Geared Toward

• Large organizations with multiple departments or
  with autonomous business units in operation as
  separate companies
• Examples of such organizations
• L3 Communications
• Raytheon
• FedEx
• Ingersoll-Rand

4
What the LOB Security Plan Should Entail

• Provide an outline of the operational environment
• Ascertain key controls within the organization
• Present a basis for measuring compliance with
  corporate security policies, standards and
  procedures
• Potential Components
• Executive Summary
• LAN Assessments
• LAN/WAN Gateway Review
• Internet Review
• Routers
• Pix Firewall
• UNIX and/or SQL Server
• Conclusion
• Glossary of Terms

5
The Purpose of the LOB Security Plan

• It is meant to afford a baseline document to
  assist in understanding the processing
  environment, help perform baseline security
  assessments in that environment, and aid in
  improving the organizations ability to obtain
  its security goals and objectives
• Used as a means of building awareness in each
  department or LOB
• To form an agreement between the department or
  LOB and the Security Team

6
LOB Security Plan Responsibilities

• The Security Team
• Has an integral role in assisting the LOB in
  development of the security plan
• Review and audit the security plan and compliance
  to company policies, standards, and procedures
• LOB
• Work closely with the Security Team in developing
  the security plan
• Update the security plan upon changes to the
  processing environment
• Prove compliance to corporate security policies
• Conclusion
• The bottom line is that it recommended to have a
  LOB Security Plan in any multiple department or
  large organizations with standalone companies
• Useful Links
• http//www.microsoft.com/smallbusiness/support/che
  cklist/step6.mspx
• http//www.whitehouse.gov/omb/egov/documents/FM_Lo
  B_Due_Diligence_Checklist_V1.pdf
• http//bbb.org/securityandprivacy/SecurityPrivacyM
  adeSimpler.pdf
• Questions?