Approval: Manager for Security Policies and Procedures
5
Assignment of Security Mentor
6
Introduction to Security Tools
7
Approval: IT Department for Access to Security Tools
8
Training on Security Rules and Regulations
9
Approval: IT Compliance Manager for Training Completion
10
Introduction to the Security Team
11
Shadowing Sessions with Seasoned Security Engineers
12
Setup for Security Engineer's Hardware and Software
13
Approval: IT department for Hardware and Software Setup
14
Overview of Current and Ongoing Security Projects
15
Setting up Communication Platforms and Channels
16
Assign Initial Tasks and Responsibilities
17
Review Security Incident Management Process
18
Approval: Security Manager on Incident Management Process Knowledge
19
Introduction to Regular Security Checks and Audits
20
Initial One-on-One with Manager to address Queries and Doubts
Welcoming and Introduction
Welcome the new security engineer to the team and provide an introduction to the company and department. Explain the importance of their role in ensuring the security of the organization's systems and data. Highlight the impact they can make in protecting sensitive information and preventing cyber attacks. Provide an overview of the onboarding process and the desired outcome of this task - making the new security engineer feel welcomed and informed.
1
She/Her
2
He/Him
3
They/Them
4
Other
1
Less than 1 year
2
1-3 years
3
3-5 years
4
5+ years
Setting up Workplace
Ensure the new security engineer has all the necessary equipment and access to tools required for their work. Walk them through the process of setting up their physical workspace, including desk arrangement, computer setup, and access cards. Explain how to connect to the organization's network, VPN, and any other relevant systems. Emphasize the importance of maintaining the security of their workspace and equipment.
1
Arrange desk
2
Setup computer
3
Issue access card
4
Provide docking station
5
Configure monitors
1
Windows
2
MacOS
3
Linux
1
Vulnerability scanning tools
2
Intrusion detection systems
3
Firewall management tools
4
Security incident management tools
5
Other
Distribute Security Policies and Procedures
Ensure the new security engineer is familiar with the organization's security policies and procedures. Provide them with the necessary documentation and explain the importance of adhering to these policies to maintain the security of the organization's systems and data. Highlight any specific policies or procedures they should pay attention to or that might be challenging to implement.
1
Acceptable Use Policy
2
Password Policy
3
Data Classification Policy
4
Incident Response Plan
5
Physical Security Policy
Approval: Manager for Security Policies and Procedures
Will be submitted for approval:
Distribute Security Policies and Procedures
Will be submitted
Assignment of Security Mentor
Assign a seasoned security engineer to act as a mentor for the new security engineer. This mentor will provide guidance, answer questions, and assist with their professional development. Emphasize the importance of this mentorship program and the benefits it can bring to the new security engineer's growth within the organization.
Introduction to Your Security Mentor
Introduction to Security Tools
Familiarize the new security engineer with the security tools used within the organization. Explain the purpose of each tool and how it contributes to the overall security of the organization's systems and data. Provide access and training on how to effectively use these tools.
1
Antivirus software
2
SIEM solution
3
Intrusion detection system
4
Penetration testing tools
5
Secure code review tools
Approval: IT Department for Access to Security Tools
Will be submitted for approval:
Introduction to Security Tools
Will be submitted
Training on Security Rules and Regulations
Educate the new security engineer on the security rules and regulations applicable within the organization and the industry. Highlight any compliance requirements they need to be aware of and any potential challenges they might face in implementing these rules. Ensure they understand the consequences of non-compliance.
1
General Data Protection Regulation (GDPR)
2
Health Insurance Portability and Accountability Act (HIPAA)
3
Payment Card Industry Data Security Standard (PCI DSS)
4
ISO 27001:2013
5
NIST Cybersecurity Framework
1
Healthcare
2
Finance
3
Retail
4
Technology
5
Government
1
Resistance from employees
2
Lack of awareness and training
3
Limited resources and budget
4
Changing regulations
5
Technological constraints
Approval: IT Compliance Manager for Training Completion
Will be submitted for approval:
Training on Security Rules and Regulations
Will be submitted
Introduction to the Security Team
Introduce the new security engineer to the members of the security team. Provide an overview of the team's roles and responsibilities, emphasizing the importance of collaboration and communication. Encourage the new security engineer to reach out to team members for support and guidance when needed.
1
John
2
Sarah
3
Michael
4
Emily
5
Alex
Shadowing Sessions with Seasoned Security Engineers
Organize shadowing sessions for the new security engineer with seasoned security engineers. These sessions will provide hands-on experience and exposure to real-world scenarios. Emphasize the value of observing and learning from experienced team members.
1
Vulnerability assessment
2
Security incident response
3
Penetration testing
4
Security awareness training
5
Security tool configuration
Shadowing Session with Seasoned Security Engineer
Setup for Security Engineer's Hardware and Software
Ensure the new security engineer has the necessary hardware and software setup to perform their job effectively. Coordinate the procurement, installation, and configuration of their equipment and any specialized security software. Explain the process for requesting additional tools or software when needed.
1
Laptop
2
Desktop PC
3
VPN access
4
Security testing tools
5
Encryption software
Approval: IT department for Hardware and Software Setup
Will be submitted for approval:
Setup for Security Engineer's Hardware and Software
Will be submitted
Overview of Current and Ongoing Security Projects
Provide the new security engineer with an overview of the current and ongoing security projects within the organization. Explain the objectives, timelines, and expected outcomes of each project. Emphasize the collaboration and contribution expected from the new security engineer.
1
Security awareness program implementation
2
Network infrastructure upgrade
3
Security incident response improvement
4
Security tool evaluation and implementation
5
Vulnerability management enhancement
1
John
2
Sarah
3
Michael
4
Emily
5
Alex
1
Research and analysis
2
Implementation and testing
3
Documentation and reporting
4
Collaboration with other teams
5
Monitoring and maintenance
Setting up Communication Platforms and Channels
Set up communication platforms and channels for the new security engineer to collaborate and communicate effectively with the team. Provide instructions for joining relevant communication groups, setting up notifications, and accessing shared resources.
1
Slack
2
Microsoft Teams
3
Email
4
Zoom
5
Shared Drive
Assign Initial Tasks and Responsibilities
Assign initial tasks and responsibilities to the new security engineer to start their involvement in ongoing security initiatives. Specify the deliverables, deadlines, and any dependencies for each task. Encourage the engineer to seek guidance and support from the mentor and team members as needed.
1
Security Policy Approval
2
Access Request Approval
3
System Vulnerability Assessment
Review Security Incident Management Process
Review the security incident management process with the new security engineer. Explain the process of detecting, analyzing, and responding to security incidents. Discuss the engineer's role in the incident management team and provide guidance on handling different types of incidents. Address any questions or concerns related to incident management.
1
Low
2
Medium
3
High
4
Critical
5
Not Applicable
Approval: Security Manager on Incident Management Process Knowledge
Will be submitted for approval:
Review Security Incident Management Process
Will be submitted
Introduction to Regular Security Checks and Audits
Introduce the new security engineer to the regular security checks and audits conducted by the company. Explain their purpose, scope, and the engineer's role in facilitating and participating in these activities. Provide resources and guidelines for conducting effective security checks and audits.
Initial One-on-One with Manager to address Queries and Doubts
Schedule an initial one-on-one meeting between the new security engineer and their manager. Provide an opportunity for the engineer to ask questions, seek clarification, and discuss any concerns or challenges they may be facing. Ensure the meeting is conducted in a supportive and constructive manner.
