1

Information security management involves challenges that are essentially unique due to the combination of technical and organizational constraints. Identify two such challenges and discuss in depth how these can affect the way information security management is performed within an organization.

I have an essay to write on the above. Can anyone spare some ideas on how I can tackle this? In the terms of technical and organizational constraints?

I think technical limitation refers to things that you have to do that are system based, but that you are unable to achieve due to some reason?

Organisation should be like, for example, your CEO requesting for information that he has no access to and demands that he has access granted?

Please enlighten me if I'm wrong.

closed as primarily opinion-based by Lucas Kauffman, Arminius, Anders, Matthew, Philipp Dec 9 '16 at 10:01

Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    We don't do your homework around here. – Lucas Kauffman Dec 9 '16 at 6:54
  • I'm voting to close this question as off-topic because homework – Lucas Kauffman Dec 9 '16 at 6:55
  • I understand that Lucas, not asking for help to write on my behalf. I just need some idea on what does it mean by technical and organizational constraints? Like maybe an example so i have an idea. – Jonovan Dec 9 '16 at 6:57
  • 1
    @LucasKauffman Homework questions are perfectly ok here if the OP shows that they understand the question and provides their attempt to answer it. – schroeder Dec 9 '16 at 7:52
  • 2
    @jonovan This question is too undefined. Can you refine it and provide your own thoughts? – schroeder Dec 9 '16 at 7:52
0

In my opinion the main problem is that most of the technical solutions reduce the comfort or efficiency of the users. So you have a strong organisational support from the top-level managment. You can only reach good acceptance of information security if all users understand the importance of information security.

Not the answer you're looking for? Browse other questions tagged or ask your own question.