Company hire a new CISO. Please read the instruction in the attachment carefully.
1.Reference at least 3 CIS controls and the reason you need them and what the expected benefit will be to implement them and mitigate the weakness you identify (do not just list the CIS control and what it does).
2.Identify 3 Risks that might impact the company and your proposed mitigation plan (what are the 3 risks and what will happen to the company if they are not mitigated; remember they may not be mitigated completely).
3.Using the organization chart below build a RACI with at least two IT roles, Legal, Financial, and Business and, 5 activities that these roles may be involved in and interact. Describe the benefits that the company will realize through this RACI
4.Write up the Security Policy (maximum 200 words) for the company. Remember to reference what a Security Policy may contain. Recall that it is not prescriptive on specific activities.


0 comments