Develop a 5- to 6-page manual using the Security Standards, Policies, and Procedures Template with recommendations to management of security standards, polices, and procedures which should be implemen
Security Standards, Policies, and Procedures Manual Template
Instructions: Replace the information in brackets [ ] with information relevant to your project.
Cyber Security Engineers are responsible for safeguarding computer networks and systems in an organization in order to protect the sensitive data they store.
Take on the role of Cyber Security Engineer for the organization you chose in Week 1. Research the following information for your chosen organization. Develop a Security Standards, Policies, and Procedures Manual using this template with recommendations to management of security standards, polices, and procedures which should be implemented in your organization.
[Organization Name] OverviewExplain the importance to your organization of implementing security policies, plans, and procedures. Discuss how security policies, plans, and procedures will improve the overall security of the organization.
[Response]
Data Privacy Policies and Procedures[Response]
Data Isolation Policies and Procedures[Response]
Non-Disclosure Agreement (NDA) Policies and Procedures[Response]
Intellectual Property (IP) Policies and Procedures[Response]
Password Policies and Procedures[Response]
Acceptable Use of Organizational Assets and Data Policies and Procedures[Response]
Employee Policies and Procedures (Separation of Duties/Training)[Response]
Risk Response Policies and ProceduresDefine avoidance, transference, mitigation, and acceptance strategies and criteria.
[Response]
Compliance (Regulatory, Advisory, Informative)Examples could include: HIPPA, FERPA, ISO, NIST, SEC, and Sarbanes/Oxley.
[Response]
Incident Response Policies and ProceduresInclude: Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned
[Response]
Auditing Policies and Procedures[Response]
Environmental/Physical Policies and Procedures[Response]
Administrative Policies and Procedures[Response]
Configuration Policies and Procedures[Response]
