ISR&R Version 3 Data Sheet - Information security roles and responsibilities

Sep 4, 2026

Uploaded by Stanley

ISR&R Version 3 Data Sheet outlines an updated information security resource focused on clear information security roles and responsibilities. It provides over 80 pre-written documents, including job descriptions, mission statements, and guidance for 29 critical organizational security documents. The material also supports management justification for funding, explains liability and responsibility, and offers project planning advice covering Data Owner, Custodian, and User roles, RBAC alignment, and third-party security.

LanguageEnglish

CategoryResearch & Report

FormatPDF

Pages1

Reading Time3 min

AccessFree to download

ISR&R Version 3 overview

Pre-written documents and critical security artifacts

Management justification and common pitfalls

Information security infrastructure project planning

Third-party security considerations

Staffing guidance and performance criteria

ISR&R Version 3 Data Sheet Information Security Roles and Responsibilities Made Easy, Version 3 is the updated version of the bestselling security resource by Charles Cresson Wood, CISSP, CISA, CISM. ISR&R V3 is based on the 20 year consulting and security experience of Mr. Wood and contains these features to help you save money while establishing a due-care information security organization: 1. Over 80 pre-written, time-saving information security documents including: 􏂷 50 complete information-security-related job descriptions 􏂷 30 information-security-related committee, board, and department mission statements 􏂷 Specification and discussion of 29 critical information security documents that every organization should have. 2. Justification to help increase managements awareness and funding of information security, including: 􏂷 How to persuade management to properly document information security roles and responsibilities; 􏂷 Discussion of responsibility and liability as it relates to documented information security roles 􏂷 Common mistakes many organizations make and how to avoid them. 3. Advice on how to plan, document and execute an information security infrastructure project including: 􏂷 How to properly review and update information security roles and responsibilities, including department interview techniques. 􏂷 Detailed discussion of the Data Owner, Custodian and User roles. 􏂷 Actions you should take to reduce your organization's exposure to workers in information security related positions of trust. 􏂷 The synergy between role based access control (RBAC) and clarification of information security roles and responsibilities. 4. Advice on how to maintain security when dealing with third parties, including: 􏂷 Pros and cons of outsourcing security functions, including validation and security when outsourcing. 􏂷 The security roles and responsibilities of software and hardware vendors. 5. Valuable staffing advice and descriptions for information security professionals including: 􏂷 Characteristics of effective information security professionals, including discussion about the pros and cons of hiring hackers and others who have been on the wrong side of the law. 􏂷 Specific performance criteria for individuals and teams. 􏂷 An expanded list of new information professional certifications with web sites, phone numbers, and addresses for each. Information Security Roles and Responsibilities Made Easy, Version 3.0 contains easily-customized documents in MS-Word format. All contents come in PDF and MS-Word format with linked cross-references. For more information visit www. informationshield.com or email us at [sales@informationshield.com](sales@informationshield.com). Copyright 2012 – Information Shield, Inc.

FAQs

What types of documents are included in ISR&R Version 3?

ISR&R Version 3 includes over 80 pre-written information security documents, such as 50 role-related job descriptions and 30 committee, board, and department mission statements, plus specification and discussion for 29 critical security documents.

How does the material help increase management awareness and funding?

It provides guidance on persuading management to document security roles and responsibilities, discusses responsibility and liability tied to documented roles, and highlights common organizational mistakes and how to avoid them.

Which roles and security approaches are covered for internal execution and access control?

It explains how to review and update roles and responsibilities using department interview techniques, provides detailed discussion of Data Owner, Custodian, and User roles, and describes the synergy between RBAC and clarified security responsibilities.

Sep 4, 2026

Uploaded by Stanley