Question: An architectural firm of eight employees, each with a networked desktop computer, wants you to develop a security policy for the company. Management has emphasized that ease of use is paramount, and little time is available for training. Working in small groups, each group should write a list of questions aimed at getting enough information for developing the policy. After determining the questions, each group should interview another group, with the other group posing as the architectural firm and answering the list of questions. What level of security should the policy reflect? Use one of the templates you found in Case Project to develop a policy based on the answers the other group supplies.
Case Project: Search for security policy templates on the Internet. A good place to start is the SANS Institute (www.sans.org). Using one or more of the templates you find, develop a security policy for your school or a business, and present it to the class. This project can also be assigned to groups of students.