Skip Ribbon Commands
Skip to main content
SharePoint
​​

​​​​​​​​​​​​digital.jpg ​​spcinfosec.png




​​The mission of the SPC Information Security Office is to design, implement, and maintain an information security program to protect SPC's systems, services and data against unauthorized use, disclosure, modification, damge or loss. The Information Security Department is committed to engaging the SPC community to establish an appropriate information security governance structure that enables effective collaboration and ensures alignment with SPC strategic objectives and foundational commitments.​​

 

Supporting elements: ​

  • ​A pervasive information security awareness program
  • An effective information security governance structure
  • A robust and scalable security architecture ​
  • Well managed and maintained computing equipment
  • Well managed and maintained enterprise applications​​
  • Well managed and maintained third-party relationships​

Departmental Functions:​

  • Mitigate security risk through outreach, awareness, assessment, policy, and best practices
  • Participate in the monitoring of systems to detect and address malicious activity
  • Respond to security incidents and performs digital forensic operations
  • Participate in the design of architecture changes and in the planning of new systems
  • Perform risk assessments and vulnerability management operations​​