Develop an information security governance and management program that aligns with organizational strategies by evaluating business requirements, applicable laws, regulations, standards, and best practices. Analyze and evaluate political, legal, economic, social, cultural, and technology factors which drive cybersecurity related investments by customers, suppliers, manufacturers, and investors.

Briefing Paper: Exploring Factors which Drive Market Demand for Cybersecurity Products and Services

Introduction to the Case Study

In this case study, you will learn about how a fictional company, Nofsinger Consulting Services, LLP, uses Business Analysis to assist its clients in performing cybersecurity-focused risk analyses and risk assessments. Readings from the course textbook, Business analysis for practitioners: A practice guide (Project Management Institute, 2015), will be used to support your learning in this course and will introduce students to the knowledge, skills, and techniques which are collectively know as business analysis. This case will also introduce you to the business characteristics of companies and the types of risks they may face when doing business online (i.e. as an e-commerce firm) or when using the Internet to support their business operations (e.g. equipment sales and support). In addition to presenting information about businesses and their operations, this case study will help students learn more about the roles that consultants and consulting firms play in the cybersecurity industry.

This case study supports the following course outcomes for CSIA 350 Cybersecurity in Business and Industry:

• Categorize, evaluate, and manage risks which impact an organization’s enterprise IT operations.

• Develop an information security governance and management program that aligns with organizational strategies by evaluating business requirements, applicable laws, regulations, standards, and best practices.

• Analyze and evaluate political, legal, economic, social, cultural, and technology factors which drive cybersecurity related investments by customers, suppliers, manufacturers, and investors.

• Identify and evaluate opportunities to improve cybersecurity across industry sectors and internationally through cooperation, collaboration, and capacity building.

Note: the course textbook is listed as a required text in the syllabus and purchase information is available via the Course Materials link. An ebook version may be available from the UMGC library at this link:
http://ezproxy.umgc.edu/login?url=https://search.ebscohost.com/login.aspx?direct=true&db=e025xna&AN=1244311&site=eds-live&scope=site&profile=edsebook