IAS

• primarily responsible for the assessment, management, and implementation of securing the information in the organization. May also referred to as the Manager for Security, the Security Administrator, or a similar title.

  Chief Information Security Officer (CISO)
• _________ should consist of a number of individuals who are experienced in one or multiple facets of the required technical and nontechnical areas.

  Information Security Project Team
• a senior executives who promotes the project and ensures its support, both financially and administratively, at the highest levels of the organization

  Champion
• a project manager, who may be a departmental line manager or staff unit manager, who understands project management, personnel management, and information security technical requirements.

  Team leader
• individuals who understand the organizational culture, policies, and requirements for developing and implementing successful policies.

  Security policy developers
• individuals who understand financial risk assessment techniques, the value of organizational assets, and the security methods to be used.

  Risk assessment specialists
• dedicated, trained, and well-educated specialists in all aspects of information security from both technical and non-technical standpoints.

  Security professionals
•  with the primary responsibility for administering the systems that house the information used by the organization.

  Systems administrators
• those the new system will most directly impact. Ideally, a selection of users from various departments, levels, and degrees of technical knowledge assist the team in focusing on the application of realistic controls applied in ways that do not disrupt the essential business activities they seek to safeguard.

  End users
• primarily responsible for advising the Chief Executive Officer, President, or company owner on the strategic planning that affects the management of information in the organization.

  Chief Information Officer