Part 1

You are a newly hired CISO for the largest student loan company in the United States. Recently, the company launched a new online lending self-service platform targeted at working adults worldwide.

The new platform replaces an out-of-date lending system based on emails for processing loan applications. The online platform will be hosted in a multi-tenant data center and managed by outsourced IT staff. However, the security will be monitored by your internal security team. 

Recently, the project has been delayed because of unanswered security concerns about how the company will protect the financial information of job applicants and future students. Your boss has asked you to provide project management to get things get back on track.

Soon after joining the project team, you are asked by the board of directors to illustrate an information security program development model that will be used to secure the new online platform and to provide a project plan for future security assessment activities to measure the security effectiveness of the online platform. They also would like to know how you will categorize resource planning for security monitoring of the online platform so they can make a more informed decision on how best to invest into areas of the company to improve overall security.

Create a presentation that includes an introduction slide, conclusion slides , and references slides for the board of directors. Your presentation should:

Outline project management.

Describe how to use 3 key areas of an information security program development model of your choice.

Categorize resource planning for security monitoring of the online platform.

Identify the categories of resource planning, and illustrate how stakeholders, personnel, and technology will be used.

All of the information required for this assignment MUST be on the main slides. Speaker notes will not be graded.

Part 2

Using the Wk 2 Assignment Template, create a 1- to 2-page Security Assessment Plan worksheet for two activities. Explain how these activities will measure security effectiveness by completing each of the columns in the table completely and accurately.