Security Service Management and Support Framework

Security service management and support framework:

• Business-driven information security management programme
• Incident response process
• Disaster recovery process
• Change control process
• Intrusion detection service
• Event monitoring service
• Security process development programme
• Security service management process
• Development controls programme
• Confi guration management process
• Operational procedures, including:
• Rule definition
  • • Key management
    • ACL maintenance
    • Backup administration
    • Information forensics
    • Event log administration
    • Anti-virus administration
• Product procurement process
• Operational management process
• Project management process