Elements and Performance Criteria
- Manage enterprise security parameters
- Determine and evaluate parameters that affect enterprise security to establish benchmark
- Review security classification and data management policies and guidance for relevance and update if required
- Plan and coordinate an effective enterprise continuity of operations (COOP) program and organisational structure for critical business continuity
- Develop a plan to address factors to manage the risks of the enterprise
- Integrate and evaluate risk management concepts into operational activities with related contingency planning activities using an enterprise COOP performance measurement program
- Evaluate and assess security incidents to establish an effective incident-management program for the enterprise
- Manage the coordination between related security teams for effective incident management processes and procedures
- Manage networks and telecommunications security
- Develop a network security and telecommunications program in line with enterprise policy and security goals
- Manage the necessary resources to integrate network security and telecommunications program activities with technical support, security administration and incident response activities in a secure network
- Establish effective communications protocols between the network security and telecommunications team and related security teams to manage the risks
- Establish a performance measurement program to evaluate the security effectiveness of the integrated network security and telecommunications network
- Ensure enterprise compliance with applicable networkbased documents and that network-based audits and management reviews are conducted to implement process improvement
- Implement and document enhancements