
Network Vulnerability Assessment Sample Report 181
Exhibit 6. Recommendations to Mitigate Risks
Policy Development (ISO 17799, Item 3.1.1)
A comprehensive and clearly articulated security policy needs to be developed.
Such a policy would provide the guidelines and define the practices that must
be followed to protect Bogus’ critical and confidential information and to
provide security to the network.
Information Protection Oversight (ISO 17799, Item 4.1.1)
The responsibility for information security should be consolidated into one
office or person that reports directly to senior management. This allows for
the development and implementation of one set of ...