Create a 4- to 5.5-page Security Risk Mitigation Plan for the organization you chose.Research and include the following: Security Risk Mitigation Plan:Select and document security policies and control

Create a 4- to 5.5-page Security Risk Mitigation Plan for the organization you chose.

Research and include the following: 

• Security Risk Mitigation Plan:
  • Select and document security policies and controls.
  • Create password policies.
  • Document administrator roles and responsibilities.
  • Document user roles and responsibilities.
  • Determine authentication strategy.
  • Determine intrusion detection and monitoring strategy.
  • Determine virus detection strategies and protection.
  • Create auditing policies and procedures.
  • Develop education plan for employees on security protocols and appropriate use.
  • Provide risk response.
    • Avoidance
    • Transference
    • Mitigation
    • Acceptance
  • Address change Management/Version Control.
  • Outline acceptable use of organizational assets and data.
  • Present employee policies (separation of duties/training).
  • Explain incident response.
    • Incident types/category definitions
    • Roles and responsibilities
    • Reporting requirements/escalation
    • Cyber-incident response teams
  • Discuss the incident response process.
    • Preparation
    • Identification
    • Containment
    • Eradication
    • Recovery
    • Lessons learned