Security Services Directory – Cyber Security
Need a security services directory. Must build the directory based off what the case company needs will be. I am attaching a NIST document that spells out examples of various security services (GRC, IAM, DFIR, etc).Prepared using the template that has been provided in the following pages of this document following all embedded instructions.
Uses the proper language and construction to communicate to an executive-level audience that for which this report is prepared.
Just as you are expected to do for all business communications, you must prepare a cover memorandum that serves to convey this report and serves as a very high-level executive summary of your findings.
Report Structure:
Includes a complete plan of precisely how you would work within the case company to create a directory of security services. Your plan must include:
The information that will be provided for each service in your directory,
How will you identifying the services to be listed as rows on your planned directory,
How will you collect the needed information for the services you have identified, and
How will you validated the plan you have created here with your business-unit partners
The purpose of a directory is to identify what is performed, how much or how often it is performed, what the costs (and perhaps revenues) are for the activity, and a business-based justification for the activity.
Provide placeholder values for the columns of information for every one of the services you identify using the method of describing less critical information by placing it in angle brackets “<>” if the information cannot be readily determined with the time and resources available.
Prepare a complete deployment project plan for security service development in the case company with:appropriate project stages needed to build out the services identified in the table you have prepared,a timeline showing the relative sequencing of the stages showing expected durations and identifying precursors
For each stage:Identify which services will be included in the stage.Enumerate for the resources will be required to complete the service development to include capital expense, labor inputs (number of hours and expected level of individual resources), and other expenses such as subscriptions and operating costs.
