Atomized security plans for organizations

The Atomized Security Plan for organizations is a set of checklists that attempt to list all of the possible information security steps an organization can take to protect itself and to break these steps into the smallest atoms of action required to complete them. The overall goal of the resource is to support security trainers to produce an easy-to-use action plan that is customized and approachable for organizations that security trainer is supporting.

Notes

The security plans are being shared and worked on at the engine room Github:

https://github.com/the-engine-room/responsible-data/tree/master/organizational-security-atomized-plan

Audience

Security trainers working with teams and organizations to improve security practices one step at a time

Food for thought

• concepts, problems
• questions to ask frequently
• preventions: what do you actually do in concrete terms to prevent these things from happening
• reactions: responsible responses for when things go wrong