Managing Security Through Services Process Leadership

Challenge Question # 1
To maintain network security, Acme corporation tightly controls software on devices connecting to their network.
Each vendor must pass a rigorous testing and certification process before their equipment can be connected. No changes allowed without recertification.

Your technician Jan is covering for Dave who is away on vacation. She is called to an Acme device to address a power supply problem. A new software release resolves this issue. Jan upgrades the device to the new software level.

Later that day, your account manager gets a call from Acme IT Security about (yet another) security violation.

How was this a security violation?

Challenge Question # 2
Sales is working through the details of the managed services renewal for Acme. The final workshop with the customer is just closing out. Your products have the security features Acme is looking for and the pricing is favorable for both parties.

Suddenly, the door opens and in walks the newly appointed Acme Security Officer. Casually, they hand you an Information Security Agreement (ISA) that  hey’d like you to sign. The ISA has questions about security incident response, change management, business resumption, HR policies, and etc.

Internally, where do you go for answers?