Information Security Management

Welcome to Diamond Hands Holdings Inc.
We are pleased to have you join our team as a cybersecurity process consultant.
At your first convenience:
• Use a search tool of your choice to locate and download three NIST Special Publications:
o SP 800-12 Rev. 1, “An Introduction to Information Security”,
o SP 800-100 “Information Security Handbook: A Guide for Managers”, and
o SP 800-35, “Guide to Information Technology Security Services”.
• Carefully read each document.
• You are preparing two reports, for two audiences, submitted under two cover memoranda. An informal report to be read by managers around the company and a formal document intended for your cybersecurity/information security management team.
• After you have read the three documents, for each of the SPs:
o Prepare a reference entry using the APA or another suitable academic writing style.
o Write a one-paragraph summary of the SP intended for reading by a manager from any unit of the company.
o Write an analysis of 400-600 words, directed at the CISO and his direct reports as to why they should use these documents to inform the approach they take in developing strategy and executing operations at the company. Be sure to use and cite examples from all three of these documents and also include a reference section. Citation and reference will use the APA or another suitable style guide of your choice.
• Assemble your deliverable into a single PDF file that includes:
o A cover memorandum that identifies you as the author and is addressed to managers across the company. The body of the memo describes what is being transmitted and highlights your informal report’s contents.
o A short informal report titled “Cybersecurity Foundational Documents” includes the summaries and citations written above
o A cover memorandum that identifies you as the author and is addressed to the cybersecurity/information security management team of the company. The body of the memo describes what is being transmitted and highlights your formal report’s contents and recommendations.
o A formatted formal Business Report that includes your analysis as written above, with at minimum identified sections for:
 Cover Page
 Executive Summary
 Introduction
 Analysis
 Conclusion
 References