An IT security policy used by a university or by some other organization. Which of the topics listed in this section does the university IT policy addresses? • The scope and purpose of the policy •

An IT security policy used by a university or by some other organization. Which of the topics listed in this section does the university IT policy addresses?

• The scope and purpose of the policy

•The relationship of the security objectives to the organization's legal and regulatory obligations, and its business objectives

•IT security requirements in terms of confidentiality, integrity, availability, accountability, authenticity, and reliability, particularly with regard to the views of the asset owners

• The assignment of responsibilities relating to the management of IT security and the organizational infrastructure

• The risk management approach adopted by the organization"

If possible, identify any legal or regulatory requirements that apply to the organization. Do you believe the policy appropriately addresses all relevant issues? Are there any topics the policy should address? Specifically, think of and give a real-life scenario portraying the following concepts:

1. CISO (Chief Information Security Officer)
2. Malware Analyst