Question

1. What is compliance and how it is related to information security?
2. What are the differences between vendor-neutral and vendor-specific certifications? Describe three of each that you would like to pursue. Justify your choices.
3. Describe one approach for information systems security education (Ex. self-study, instructor-led and online training, and postsecondary degree programs). Identify the advantages and disadvantages
4. Which of the following factors is more important towards security compliance? (Ex. Security awareness, management support, security culture, risk of punishment). Identify the priority and justify your choices.

Answer 1

1.Compliance- Compliance is the process of meeting the requirements of a third party organizations for the digital security who are aiming for good business markets in a market. Compliance needs to satisfy the needs of third party where as security does not need to satisfy any third party needs.

2. Vendor-neural certification involves in best practice of concepts in a particular area such as security and project management whereas vendor-specific certification covers specific technologies and tools and given expertise not only in specific tool but also in products and software platforms.

Some of the vendor specific certifications are below:

Fortinet Network Security expert(NSE)- intended for those who want to become expert in security skills of the networks

Cisco CCNA- It is a routing and switching network certification which validates the certification holder network skills and helps in expertising the cisco routing and tools in it.

Some of the vendor neural certifications are:

compTIA security+ - it is intend to validate the mid level security technician skill set on security.

compTIA netowrk+ - it is intend to validate the mid level network technician skill set on networks.

3.Information system study can be used to increase our knowledge and it can be done with self study. Self-study is one of the great approach in studying information system. the advantage of self study is that we can get some confidence over our knowledge and can be express able and used anywhere without anyone's help. The disadvantage of self study is that we don't know if our perspective of understanding is correct or not.

4. The priority in my opinion is Management support, security culture, risk of punishment, security awareness.

• Management support is essential as it gives the individual a boost up to work efficiently
• Security culture is essential for confidential.
• risk of punishment helps in individuals to work with discipline.
• security awareness helps in privacy of data.