Defining Roles and Responsibilities

	Home

	MCSE

	MCSE + Security

	CCNA

	CCNP

	Schedule

	Register

	Frequently Asked Questions

	Course Fees

	Contact US

	Boot Camp Location

	Compare us to our competitors

	Testimonials

	Sitemap

JOIN THE BEST MCITP Boot Camp, MCSE Boot Camp also CCNA , CCNP Certification Boot Camp Training program. 100% Guaranteed - Lowest Fees, Highest Passing Rate.

MCSE 2016 Boot Camp : Azure Boot camp : CCNA / CCNAX Boot Camp:

MCSE Boot Camp Training & CCNA Boot Camp Training Back to Back

14 Days Hands-On Instruction w/ Onsite Testing

Custom Official Microsoft Courseware

Proprietary Exam Preparation Study Guide

Microsoft Certified Instructors

175+ Hours of Interactive Self-Study Materials

1500+ Realistic Practice Exam Questions

5 Microsoft Exam Vouchers

Exams Delivered - Days 3,6,9,11,14

100% Certification Guarantee

Extensive Gear / Lab Access

Free Windows 7/8 eLearning

Hotel/Travel Options Available

MCSE MCITP Certification Notes :
Back

The establishment of clear roles and responsibilities is a critical success factor for any risk management program due to the requirement for cross-group interaction and segregated responsibilities. The following table describes the primary roles and responsibilities used throughout the Microsoft security risk management process.

Table 3.3 Primary Roles and Responsibilities in the Microsoft Security Risk Management Process

Title	Primary Responsibility
Executive Sponsor	Sponsors all activities associated with managing risk to the business, for example, development, funding, authority, and support for the Security Risk Management Team. This role is usually filled by an executive such as the chief security officer or chief information officer. This role also serves as the last escalation point to define acceptable risk to the business.
Business Owner	Is responsible for tangible and intangible assets to the business. Business owners are also accountable for prioritizing business assets and defining levels of impact to assets. Business owners are usually accountable for defining acceptable risk levels; however, the Executive Sponsor owns the final decision incorporating feedback from the Information Security Group.
Information Security Group	Owns the larger risk management process, including the Assessing Risk and Measuring Program Effectiveness phases. Also defines functional security requirements and measures IT controls and the overall effectiveness of the security risk management program.
Information Technology Group	Includes IT architecture, engineering, and operations.
Security Risk Management Team	Responsible for driving the overall risk management program. Also responsible for the Assessing Risk phase and prioritizing risks to the business. At a minimum, the team is comprised of a facilitator and note taker.
Risk Assessment Facilitator	As lead role on the Security Risk Management Team, conducts the data gathering discussions. This role may also lead the entire risk management process.
Risk Assessment Note Taker	Records detailed risk information during the data gathering discussions.
Mitigation Owners	Responsible for implementing and sustaining control solutions to manage risk to an acceptable level. Includes the IT Group and, in some cases, Business Owners.
Security Steering Committee	Comprised of the Security Risk Management Team, representatives from the IT Group, and specific Business Owners. The Executive Sponsor usually chairs this committee. Responsible for selecting mitigation strategies and defining acceptable risk for the business.
Stakeholder	General term referring to direct and indirect participants in a given process or program; used throughout the Microsoft security risk management process. Stakeholders may also include groups outside IT, for example, finance, public relations, and human resources.

The Security Risk Management Team will encounter first-time participants in the risk management process who may not fully understand their roles. Always take the opportunity to provide an overview of the process and its participants. The objective is to build consensus and highlight the fact that every participant has ownership in managing risk. The following diagram, which summarizes key participants and shows their high-level relationships, can be helpful in communicating the previously-defined roles and responsibilities and should provide an overview of the risk management program.

To summarize, the Executive Sponsor is ultimately accountable for defining acceptable risk and provides guidance to the Security Risk Management Team in terms of ranking risks to the business. The Security Risk Management Team is responsible for assessing risk and defining functional requirements to mitigate risk to an acceptable level. The Security Risk Management Team then collaborates with the IT groups who own mitigation selection, implementation, and operations. The final relationship defined below is the Security Risk Management Team's oversight of measuring control effectiveness. This usually occurs in the form of audit reports, which are also communicated to the Executive Sponsor.

Call Now : 800-519- 2267

Why Vibrant Boot camp

No Prestudy

Longest Duration Bootcamp

Chalk Talk Training

Highest Passing Rate

Bootcamp since 1997

Guaranteed Lowest Rate

Guaranteed Certification ...

MCITP Boot Camp : 14 days Win2008 MCITP certification Boot camp.

Testimonials

If you're serious about getting certified, this is the place to go. Definitely worth their competitive price. Excellent instructors, making it possible for anyone to learn no matter what your level of experience or knowledge.

Michael Doty

Join MCSE Boot Camp & CCNA Boot Camp Back to Back Certification Today.
links 270 290 291 293 294 298 299 Security 640-801 routing 811 821
831 Resources MCSE + CCNA Training Card pay Papal MCSE Notes CCNA Notes
Win2003 Server Notes index main root link resources home Ref1 Ref2

mcse1 mcse2 mcse3 mcse4 mcse5 mcse6 mcse7 mcse8 mcse9 mcse10 mcse11 mcse12 mcse13 mcse14 mcse15 mcse16 mcse17 mcse18 mcse19 mcse20 mcse21 mcse22 mcse23 mcse24 mcse25 mcse26 mcse27 mcse28 mcse29 mcse30 mcse31 mcse32 mcse33 mcse34 mcse35 mcse36 mcse37 mcse38 mcse39 mcse40 mcse41 mcse42 mcse43 mcse44 mcse45 mcse46 mcse47 mcse48 mcse49
mcse50 mcse51 mcse52 mcse53 mcse54 mcse55
MCSE certification camp Vibrant MCSE boot camp CCNP Boot Camp Vibrant Medicare
Redhat Linux Training

MCITP MCSE Boot Camp

Defining Roles and Responsibilities