Please enable JavaScript.

Coggle requires JavaScript to display documents.

Policy Mind Map - Coggle Diagram

- - - - Identify and engage the CEOs and stakeholders
      - Provide undertake change control planning
      - Establish the upgrade requirements
    - - Provide an efficient road map to any upgrade in the software of operation system
      - Establish a requirement list to meet the company's objective outcomes
      - Check if the upgrade will not going to affect the business of Zara
    - - Include external and internal stakeholders and engaging other teams to find how the upgrade will effect them
      - Assigning a dedicated Change Control Manager to the process and include developing a communication plan
      - Check the technical specifications of the new software
    - - Achieve better upgrading system
      - Meet the business objectives
      - Provide better review from CEOs and other stakeholders
  - - - Infosec responsibilities regarding corporate acquisitions
      - define the minimum security requirements for in-store network
    - - Adopt the minimum standards for end-user devices
      - All hosts (servers, desktops, laptops) will be replaced or re-imaged with a standard image
      - The network devices will be added based on the company standard image
    - - Install efficient in-store network
      - Secure internal network
      - Connect all stores with secure network
    - - Provide a plan to measure this policy
      - Check the functionality in all stores
      - Will meet the company requirements
- - - - Define and specify company rules
      - Must be specific, clear, and easily understood
      - Handle problems and issues
      - Involve upper management every time when they need to make decision
      - Communicate the individual and team responsibilities
    - - Enables everyone to work together toward the company's objectives
      - Employees understand how to perform their tasks quickly and easily
      - Give a company better protection from potential legal problems
    - - Involved team
      - Business Analyst
      - Stakeholders
      - CEOs
      - Managers
    - - Employee development and compensation that contains performance reviews
      - Areas for improvement
      - Achieve better results
  - - - Committed to protecting employees, partners, vendors
      - Establish a culture of openness, trust and emphasize the employee’s and consumer’s expectations to be treated to fair business practices
      - Involving the participation and support of every employee for better and effective ethics
    - - Build a good reputation across the company's departments and employees
      - Help in keeping all employees and owners of a company in-line
    - - Work toward vendor satisfaction to provide great products within timely frame
      - CEOs must adopt honesty and integrity as their top priority
      - Compliance measurement such as adopting methods of external and internal audits, feedback, and business reports.
    - - Achieve better results
      - Employee development and compensation that contains performance reviews
      - Areas for improvement
- - - - All security issues that are discovered during assessments must be mitigated based upon the following risk levels
        
        a) High – Any high risk issue must be fixed immediately
        
        Medium – Medium risk issues should be reviewed to determine what is required to mitigate and scheduled accordingly
        
        Low – Issue should be reviewed to determine what is required to correct the issue and scheduled accordingly
    - - Web application vulnerabilities account for the largest portion of attack vectors outside of malware
      - Web application be assessed for vulnerabilities and any vulnerabilities be remediated prior to production deployment
    - - Define web application security assessments
      - Discover and subsequent mitigation of these issues that will limit the attack surface on the company
      - Satisfy compliance with any relevant policies in place
    - - Periodic walk-thrus
      - Video monitoring
      - Business tool reports
      - Internal and external audits
      - Feedback to the policy owner
- - - - Employees should strive to maintain a civil work atmosphere
      - Work environment free from disparaging remarks about religion, ethnicity, sexual preferences, and appearance
      - Conservative criticism the will help to improve the business
    - - Guide each employee in relationships with fellow workers and the public
      - The purpose of communication should be to help others and to make our business run as effectively as possible
      - Gaining the respect of our colleagues and customers
    - - facilitate better communication
      - Paving the way for better business
      - Adjust the policy to coincide with your business’ values
    - - Provide better review from CEOs and other stakeholders to the company environment
      - Achieve better business improvement