Residency Project Assignment: Information Security Policy
Information security policies are written instructions provided by management that inform employees and others in the workplace about proper behavior regarding the use of information and information assets.
Policy in business is a statement of managerial intent designed to guide and regulate employee behavior in the organization; in IT, a computer configuration specification used to standardize system and user behavior.
A quality information security program begins and ends with policy. Information security policies are designed to provide structure in the workplace and explain the will of the organization's management in controlling the behavior of its employees with regard to the appropriate and secure use of its information and information resources. Policy is designed to create a productive and effective work environment, free from unnecessary distractions and inappropriate actions. In general, a policy is simply a manager's or other governing body's statement of intent, as such, a policy (document) actually contains multiple policies (statements). In InfoSec, we typically use the document version of the term policy when discussing the subject, whereas in IT we use policy to specify computer system configuration.
In a 6 slides PowerPoint Presentation, address the following:
1) List and describe the three types of InfoSec policies indicated in NIST SP 800-14.
2) What is the purpose of the EISP?
3) What is the purpose of the ISSP?
4) What is the purpose of the SysSP?
5) List and describe the four elements that should be present in the EISP.
6) List and describe the three functions that the ISSP serves in the organization.
Format your assignment according to the following formatting requirements:
(1) The answer should be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides.
(2) The response also includes a cover page containing the title of the assignment, the student's name, the course title, and the date. The cover page is not included in the required page length.
(3) Also include a reference page. The Citations and references should follow APA format. The reference page is not included in the required page length.