11. President Sr. Manager Operations ISM Manager Corporate Comm. Team Supervisor Asst Manager Team Leader Agents Sr. Manager operations Manager HR Team Supervisor Asst Manager Team Leader Executive Sr. Manager Finance Asst Manager Manager Tech Team Leader Executive Sr. Manager Technology Sr. Executive ISMS Asst Manager Team Supervisor Agents Manager operations Sr. Manager Admin Asst Manager Executive ISSC Director T e chnology& ISSC Chairperson Director Finance & HR Director Operations Asst Manager Team Leader Asst Manager Manager SW Executive AJUBA SECURITY INFO ORGANIZATION Manager Corporate Comm. Team Supervisor Asst Manager Team Leader Agents Sr. Manager operations Manager HR Team Supervisor Team Leader Executive Sr. Manager Finance Asst Manager Team Leader Executive Sr. Manager Technology Asst Manager Agents Asst Manager Executive Asst Manager Manager SW Executive Sr. Manager Operations ISM President ISSC Director T e chnology& ISSC Chairperson Director Finance & HR Director Operations Asst Manager Manager Tech Sr. Executive ISMS Team Supervisor Manager operations Sr. Manager Admin Team Leader Asst Manager
12.
13.
14.
15. InfoSec – Focus Shift Ajuba Security Approach – Terminology Used TRADITIONAL APPROACH REPLACED BY Central Security Team Centrally Enabled Participative Team CSO Steering Committee coordinate by a Chairperson Policy Enforcement Participation & Peer Pressure Vigilance, Monitoring Peer Reporting & Health Check Disciplinary Action Incident Resolution Internal Audit Peer Review ISMS I Support Maintaining Security!
16.
17.
18.
19. INFO SECURITY LIFE CYCLE IN AJUBA INFO SECURITY IS A COMPLETE LIFE CYCLE INVOLVEMENT IN AJUBA
20.
21. RISK MODEL – COMPLETE FEEDBACK Risk Assessment done by the respective team with coordination / direction from ISMS team
People involvement voluntary and hence has better commitment
First developed by Dr. Laree Kiely and Terry Benzel at the USC Marshall School of Business Institute for Critical Information Infrastructure Protection. Adapted by ISACA in 2008 to develop the model with its concepts