Reference no: EM132430621

Task: 1: What are security policies and why are they so important for organizations to implement?

- ISS management life cycle

- Information assurance (IA)

- Information security governance

- ISS policies

- ISS policy implementation or change

Task 2: Pick 2 of the business drivers that impact organizational security policies and explain why?

Task 3: Explain the importance of the 3 main drivers to government security regulations

1. Consumer Protection

2. Stable Economy

3. Tax Revenue

Task 4: The concept of risk mitigation is essential when implementing security policies. Explain what your understanding of this process involves.

Task 5: Explain the steps involved in implementing a security policy within an organization, where is the most obvious chance for error?

Task 6: When organizations are implementing security policies, what business considerations must they take into account and why is this important?

Task 7: When implementing policies and standards, building consensus amongst organizational stake holders is important. Why is intent vs. need an important consideration?

Task 8: Implementing security policies in an organization requires separation of duties when it comes to the IT staff. What does this concept mean and how do organizations ensure they are compliant?

Task 9: Pick two best practices for User Domain Policies and explain what they are and provide examples of what could go wrong in an organization if these best practices are not followed.

Task 10: Sometimes organizations require team members to access assets and data remotely, when not in the physical facility. It is necessary for organizations to establish Remote Access Domain policies, select one of the Baseline Standards and explain its importance.

Task 11: Conducting a Risk and Control Self-Assessment(RCSA) will identify 4 key challenges and risks that face an organization what are these and what are their importance?

Task 12: The organizational support services team serves a vital role, to address the needs of the employees and customers. What value do they add in terms of security policy implementations?

Task 13: Establishing security policies within an organization is a necessary endeavor. However, it is fruitless unless the information is effectively disseminate. How would an organization go about getting this information out to the masses?

Task 14: Policy monitoring procedures must be implemented for any policies that the organization configures. Internet usage policies is a great example, what are your thoughts on the validity of monitoring Internet usage on company assests?

Task 15: Pick one of the 3 automated monitoring systems and explain its use and capabilities.

Attachment:- Security Policies and Implement.rar