31 May Based on the reading materials and textbook, decide what are going to be your Top 10 InfoSec policies that you are going to recommend to the company you have selected from the
Based on the reading materials and textbook, decide what are going to be your Top 10 InfoSec policies that you are going to recommend to the company you have selected from the three options of Week 1 Homework Assignment. The list needs to be prioritized, so that the most important policy is priority #1, the second most important policy is priority #2, and continuing to the tenth most important policy is priority #10 (this does not make it the "least important" policy – they should all be important). Each policy on the list should have a policy title/subject and include 2-4 sentences to describe/highlight the purpose of the policy. Then, in addition, you need to explain your justification for the priority order of the top 5 policies by providing 3-4 paragraphs to explain why you prioritized them in their particular sequence – as if you are justifying the list to the Owner/CEO.]
Assignment outcomes: (1) Prioritized list of top 10 InfoSec policies (with descriptions) and (2) justification for the sequence of the top 5 policies.
CYB454 Cybersecurity Planning and Policy
Week 4 Assignment Full Draft Information Security Policy
Student Name:
Company Option #_
Instructor: [Professor’s Name]
Date:
CYB454 Cybersecurity Planning & Policy [Name]
Company Option #_ [Date]
Highest Priority Information Security Policy:
Policy Title/Topic: [Use this space to write the title or topic of the policy; this is NOT
the beginning of the policy itself, just a preliminary descriptor.]
Implementation Strategy: [Use this space to write 3 to 4 paragraphs about how you
would begin to implement the policy within your selected company.]
[Be sure to remove the previous page header – the policy will generally not have headers.]
[Start the Policy (full draft version) at the beginning of a new page, using the
sample format provided below or one that is similar – the use of boxes or lines around the pages are optional and only shown on the sample as an example format. The important content includes the necessary components of the policy header information, the breakdown of the policy sections (with headings), and the policy content itself. Following the formatting of the example policy, it will not use double-line spacing.]
Company XYZ Official Company Policy
Category:
Information Security Policy #
IS-021 Version #
1.1
Policy Title:
Acceptable Use of Company Computer Assets Effective Date:
Nov. 1, 2022
Prior Versions:
This version supersedes Version 1.0 Approving Authority: CISO
The format and structure of a specific policy may vary; although, once an organization has a standard format/structure to policies in general, then all policies should follow that format. For this assignment, students may organize the policy into whatever logical format and structure you see fit. Here is an example: I. Policy Statement II. Scope III. Policy Overview IV. Compliance Program V. Responsibilities and Authorities
[Editorial Note: It is not only beneficial, but may be legally necessary, to include a “Revision History” section at the end of the policy. An example of what a Revision History might look like, is shown below.]
Revision History/Tracking
Revision
Date Version #
Revisions By
(Name & Title) Summary Description of Revisions
