As a staff member supporting the CISO, you have been asked to research and then draft an issue specific policy for each of the identified

Learning Goal: I’m working on a cyber security project and need an explanation and answer to help me learn.

Your Task Assignment
As a staff member supporting the CISO, you have been asked to research and then draft an issue
specific policy for each of the identified issues (three separate policies). These policies are to be written

CSIA 413: Cybersecurity Policy, Plans, and Programs

for MANAGERS and must identify the issue, explain what actions must be taken to address the issue (the
company’s “policy”), state the required actions to implement the policy, and name the responsible /
coordinating parties (by level, e.g. department heads, or by title on the organization chart).
After completing your research and reviewing sample policies from other organizations, you will
then prepare an “approval draft” for each issue specific policy.

 The purpose of each issue specific policy is to address a specific IT governance issue that
requires cooperation and collaboration between multiple departments within an
organization.
 Each issue specific policy should be no more than two typed pages in length (single
space paragraphs with a blank line between).
 You will need to be concise in your writing and only include the most important
elements for each policy.
 You may refer to an associated “procedure” if necessary, e.g. a Procedure for Requesting
Issuance of a Third Level Domain Name (under the company’s Second Level Domain
name) or a Procedure for Requesting Authorization to Establish a Social Media Account.
Your “approval drafts” will be combined with a one page Executive Summary (explaining why
these issue specific policies are being brought before the IT Governance Board).

attachment_1-71 Download

Answer preview for As a staff member supporting the CISO, you have been asked to research and then draft an issue specific policy for each of the identified

1946 Words