Critical Assignment (Law & Ethics)
IT Security Policy: Your organization of 100 employees has recently became a victim of cyber-crime in which a database of personal information (i.e. credit card and social security numbers) was compromised. In light of these events, management has elected you to develop a plan to create a comprehensive IT security policy that includes a decision making framework based on ethical leadership models.
The purpose of this assignment is to describe the frameworks and staff used in business continuity management. To do this, create a 3 page report (not including title, table of contents, references, appendices) with the following sections:
Organizational strategic governance framework,
Business continuity management planning frameworks,
Each section should closely follow APA standards and include associated:
Standards – a detailed written definition for hardware and software and how they are to be used. Standards ensure that consistent security controls are used throughout the IT system.
Procedures – written instructions for how to use policies and standards. They may include a plan of action, installation, testing, and auditing of security controls.
Guidelines – a suggested course of action for using the policy, standards, or procedures. Guidelines can be specific or flexible regarding use for each policy discussed.
