Effective information technology security policy framework

Assignment Help Basic Computer Science

Reference no: EM132369932

Establishing an effective Information Technology Security Policy Framework is critical in the development of a comprehensive security program. Additionally, there are many security frameworks that organizations commonly reference when developing their security programs.

Review the security frameworks provided by NIST (SP 800-53), ISO / IEC 27000 series, and COBIT. Assume that you have been hired as a consultant by a medium-sized insurance organization and have been asked to draft an IT Security Policy Framework.

You may create and / or assume all necessary assumptions needed for the completion of this assignment.

Write a three to five (3-5) page paper in which you:

Select a security framework, describe the framework selected, and design an IT Security Policy Framework for the organization.

Describe the importance of and method of establishing compliance of IT security controls with U.S. laws and regulations, and how organizations can align their policies and controls with the applicable regulations.

Analyze the business challenges within each of the seven (7) domains in developing an effective IT Security Policy Framework.

Describe your IT Security Policy Framework implementation issues and challenges and provide recommendations for overcoming these implementation issues and challenges.

Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.

Use the APA format.

Reference no: EM132369932

Questions Cloud

Recent article about cyber security threats on the news : Finding a recent article about Cyber security threats on the News. It has to be no older than 2 months and about Cyber security threats.

Networking and social capital and learning outcomes : Review 4 academically reviewed articles on the use of Networking and Social Capital to manage the external dynamics of a team.

For cloud computing to become multi-jurisdictional : For cloud computing to become multi-jurisdictional, it must be separated from politics.

Discusses decision-making using system modeling : Discusses decision-making using system modeling. An open source software tool, EMA Workbench that can perform EMA and ESDMA modeling.

Effective information technology security policy framework : Establishing an effective Information Technology Security Policy Framework is critical in the development of a comprehensive security program.

Topic relevant to risk management strategies : Pick a topic relevant to Risk Management Strategies. Summarize how each of the sources presents and deals with the subject

Explained the process lego used to implement erm : Explained the process LEGO used to implement ERM. Do you agree with approach implemented and why? If you could change anything about the implementation of ERM

Management step is to develop metrics and measure results : one of the eight (8) Information Risk Planning and Management step is to develop metrics and measure results

Ready to adopt the cloud solution recommendation : NTC 260-The President and Board of Directors accept your proposal and are ready to adopt the cloud solution recommendation.

User Account

All Pages