Benchmark Assignment: Impact Analysis: Information Acquisition
Examine the laws, regulations, and standards that organizations use to align with government requirements around cybersecurity best practices within their industry.
Select an industry of your choice and review its compliance requirements. Then, using a fictitious company that is just starting out, identify the essential elements of what is required to attain compliance or successful cybersecurity resilience. Within a report to the CIO, present this information from a legal standpoint making sure to address the following:
a) Identify any industry specific compliances that must be met (i.e., HIPAA, COPPA, DOD). Determine what overarching guidance they must comply with. Determine what overarching laws they must comply with.
b) Examine the requisite set of standards, frameworks, policies, and best practices most helpful in the development and implementation of the organizations objectives.
c) Identify the organization's critical data infrastructure assets (i.e., network, telecom, utilities, applications, computers and client data categories).
d) Identify human resources for technical, management and legal operations.
e) Identify requisite law enforcement entities required for reporting breaches to (i.e., local, state, and federal areas of compliance).
Format your assignment according to the give formatting requirements:
1. The answer must be double spaced, typed, using Times New Roman font (size 12), with one-inch margins on all sides.
2. The response also includes a cover page containing the title of the assignment, the course title, the student's name, and the date. The cover page is not included in the required page length.
3. Also include a reference page. The references and Citations should follow APA format. The reference page is not included in the required page length.