Information Security Risks

5. Information Security Risks

A reflection is meant to illustrate your understanding of the material and how it affects your ideas and possible practice in the future.

• Describe the steps that an organization takes in order      to manage information security risks and build a risk matrix. What is      involved in each step of this process? Use a specific organization in your      response.

6. Security Life Cycle Steps

• Explain the differences between the systems development      life cycle (SDLC) and the security life cycle. Include both management and      non-management IT security positions that perform security life cycle      steps and briefly describe their roles.