WEEK 9 - Action Plans


          I believe action plans are the pivotal points of the whole process. You can sit down, draw out a plan of attack, identify the problems all day long. Unless you have a plan to correct the issues and to maintain recommendations, the whole process would be worthless. This is what the big companies pay for, their information security.

          You can say that any part of the process is important in the chain of things. But if you don't produce the results, a corporation's network security could show massive problems leaving everything vulnerable. It happens all the time now and has been reported by huge company's like Sony and our own government agencies. Can't just follow a known model or process, you have to fix the issues to stay safe!