Information Security for Managers

Operations

CHAPTER 20

OPERATIONS ENCOMPASSES PRODUCT DEVELOPMENT and/or service delivery processes, including implementation, monitoring, auditing, and incident handling; indeed, operations is comprised of the daily activities in an organization. Security operations, more specifically, deals with managing risks and carrying out duties related to security policies. It takes into account technical issues such as using fault-tolerant systems and redundancies, and using administrative facilities such as incorporating oversight of security and quality checking in the systems development or implementation life cycles. Managing operations includes, among other things that we have mentioned, having the “right” people in the “right” places at the ...