01 Jul Creating and Communicating a Security Strategy
Question Description
As an IT professional, you’ll often be required to communicate policies, standards, and practices in the workplace. For this assignment, you’ll practice this important task by taking on the role of an IT professional charged with creating a memo to communicate your company’s new security strategy.
The specific course learning outcomes associated with this assignment are:
• Analyze the importance of network architecture to security operations. • Apply information security standards to real-world implementation.
• Communicate how problem-solving concepts are applied in a business environment.
• Use information resources to research issues in information systems security.
• Write clearly about network security topics using proper writing mechanics and business formats.
Preparation
1. Review the essential elements of a security strategy A successful IT administration strategy requires the continuous enforcement of policies, standards, and practices (procedures) within the organization. Review these elements to see how they compare:
Policy The general statements that direct the organization’s internal and external communication and goals.
Standards Describe the requirements of a given activity related to the policy. They are more detailed and specific than policies. In effect, standards are rules that evaluate the quality of the activity. For example, standards define the structure of the password and the numbers, letters, and special characters that must be used in order to create a password.
Practices The written instructions that describe a series of steps to be followed during the performance of a given activity. Practices must support and enhance the work environment. Also referred to as procedures.
2. Describe the business environment You are the IT professional in charge of security for a company that has recently opened within a shopping mall. Describe the current IT environment at this business. You can draw details from a company you work for now or for which you have worked in the past. You’ll need to get creative and identify the details about this business that will influence the policies you’ll create. For example, does the company allow cell phone email apps? Does the company allow web mail? If so, how will this affect the mobile computing policy? Describe all the details about this business environment that will be necessary to support your strategy.
– Assignments and Rubrics
3. Research sample policies
Familiarize yourself with various templates and sample policies used in the IT field. Do not just copy another company’s security policy, but rather learn from the best practices of other companies and apply them to yours. Use these resources to help structure your policies: ●Information Security Policy Templates
●Sample Data Security Policies
● Additional Examples and Tips
Instructions
With the description of the business environment (the fictional company that has opened in a shopping mall) in mind and your policy review and research complete, create a new security strategy in the format of a company memo (no less than three to five pages) in which you do the following:
1. Describe the business environment and identify the risk and reasoning Provide a brief description of all the important areas of the business environment that you’ve discovered in your research. Be sure to identify the reasons that prompted the need to create a security policy.
2. Assemble a security policy Assemble a security policy or policies for this business. Using the memo outline as a guide, collect industry-specific and quality best practices. In your own words, formulate your fictional company’s security policy or policies. You may use online resources, the Strayer Library, or other industry-related resources such as the National Security Agency (NSA) and Network World. In a few brief sentences, provide specific information on how your policy will support the business’ goal.
3. Develop standards Develop the standards that will describe the requirements of a given activity related to the policy. Standards are the in-depth details of the security policy or policies for a business.
4. Develop practices Develop the practices that will be used to ensure the business enforces what is stated in the security policy or policies and standards.
Additional Examples and Tips
Example 1: XYZ Inc. Company-Wide Employee Password Strategy
Policies • All users must have a password. • Passwords must be changed every six months.
Standards • A password must have a minimum of six characters. • A password must have a maximum of 12 characters. • A password must contain letters, numbers, and special characters other than $.
Practices-Employee • Create a password. The UserID should be an EmployeeID already generated by HR. • Send a request to create the account to the Information Technology (IT) department. • User receives a temporary password. • Users must change their temporary password the first time they log in.
Example 2:
Security Policy and Standards Password Policy: Passwords are an important part of computer security at your organization. They often serve as the first line of defense in preventing unauthorized access to the organization’s computers and data.
In order to define the password policy, it is important to identify the standards. 1. Multi-factor authentication 2. Password strength standard 3. Password security standards; how to keep the password secure
Tips and Points to Consider When Identifying Risks or Security Vulnerabilities • Flaws in operating systems due to constant attack by malware • Denial of services attacks • Employees data theft • User set a weak password or password that is easy to guess, such as a birthday or child’s name. • User leaves sensitive data on an unlocked, unattended computer • Organization allows sensitive data on a laptop that leaves the building • Data can be accessed remotely without using proper security
Our website has a team of professional writers who can help you write any of your homework. They will write your papers from scratch. We also have a team of editors just to make sure all papers are of HIGH QUALITY & PLAGIARISM FREE. To make an Order you only need to click Ask A Question and we will direct you to our Order Page at WriteDemy. Then fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
Fill in all the assignment paper details that are required in the order form with the standard information being the page count, deadline, academic level and type of paper. It is advisable to have this information at hand so that you can quickly fill in the necessary information needed in the form for the essay writer to be immediately assigned to your writing project. Make payment for the custom essay order to enable us to assign a suitable writer to your order. Payments are made through Paypal on a secured billing page. Finally, sit back and relax.
About Writedemy
We are a professional paper writing website. If you have searched a question and bumped into our website just know you are in the right place to get help in your coursework. We offer HIGH QUALITY & PLAGIARISM FREE Papers.
How It Works
To make an Order you only need to click on “Order Now” and we will direct you to our Order Page. Fill Our Order Form with all your assignment instructions. Select your deadline and pay for your paper. You will get it few hours before your set deadline.
Are there Discounts?
All new clients are eligible for 20% off in their first Order. Our payment method is safe and secure.