Question

Why is a methodology important in the implementation of information security? How does a methodology improve the process? A methodology is a formal technique that has a structured sequence of procedures that is used to solve a problem. Methodology is important in the implementation of information security because it ensures that development is structured in an orderly, comprehensive fashion. The methodology is important in the implementation of information security for two main reasons.•First, it entails all the rigorous steps for the organizations’ employees to follow, therefore avoiding any unnecessary mistakes that may compromise the end goal (i.e., to have a comprehensive security posture). An example of this is that a methodology guides an organization to solve the root cause of information security problem, not just its symptoms•Second, methodology increases the probability of success. Once a methodology is adopted, the personnel selected will be responsible for establishing key milestones and make accountable to achieve the project goals.The methodology can greatly improve the process. For example, following the six steps of the SDLC (Systems Development Life Cycle) (investigation, analysis, logical design, physical design, implementation, and maintenance and change) allows development to proceed in a orderly, comprehensive fashion. Individuals or groups assigned to do the

Answer 1

Why is a methodology important in the implementation of information security? How does a methodology improve the process?

Answer:

Methodology is the science of techniques, procedures , methods etc. for to solve problems.

Methodology is important in the implementation of information security as follows;

- it structures development in an orderly, comprehensive fashion.

- It explores the scope of risk assessment approach, identification, analysis and evaluation, treatment option , control objectives and explore control for the treatment of risks.

- It helps to engage compliance in frameworks and in regulations

- It preserves the reputation of the system as improvements and feedbacks are instrumental.

Explanation: