Computer systems security foundation: Security Policies, Procedures, and Regulatory Compliance

Assignment Details

Close

Unit 4 – Individual Project (150 points)

Key Assignment Draft

This week, you will submit a draft of your Key Assignment template. Be sure to add the new material to this document in Section 4. Remember to incorporate any previous feedback into the appropriate sections. The submission should contain the following information:

• Security Management Document shell
  • Use Word
  • Title page
    • Course number and name
    • Project name
    • Your name
    • Date
  • Table of Contents (TOC)
    • Use an autogenerated TOC.
    • This should be on a separate page.
    • This should be a maximum of 3 levels deep.
    • Be sure to update the fields of the TOC so that it is up-to-date before submitting your project.
  • Section headings
    • Week 1: Introduction to Information Security
      • This section will describe the organization and establish the security model that it will use.
    • Week 2: Security Assessment
      • This section will focus on risks that are faced by organizations and how to deal with or safeguard against them.
    • Week 3: Access Controls and Security Mechanisms
      • This section examines how to control access and implement sound security controls to ensure restricted access to data.
    • Week 4: Security Policies, Procedures, and Regulatory Compliance
      • This section will focus on the protection of data and regulatory requirements that the company needs to implement.

The case study company is also concerned about the confidentiality and integrity of the data. What policies and controls are needed to meet the regulatory requirements imposed by the recent initial public offering (IPO)? In an effort to ensure the confidentiality of data both internally and externally, discuss how you can effectively protect the data in motion and at rest. Create the following section for Week 4:

• Week 4: Security Policies, Procedures, and Regulatory Compliance
  • List and describe the regulatory requirement that was introduced by the IPO.
  • List and describe at least 5 policies that the company needs.
  • From the list of policies, list and describe at least 3 controls that the company needs to implement.
  • Describe the data at rest and data in motion and analyze how they can be protected
• Section 4 should be 2–3 pages long.
• Name the document “CS651_FirstnameLastname_IP4.doc.”

Worked Example

Please refer to the following worked example of this assignment based on the problem-based learning (PBL) scenario. The worked example is not intended to be a complete example of the assignment, but it will illustrate the basic concepts that are required for completion of the assignment, and it can be used as a general guideline for your own project. Your assignment submission should be more detailed and specific, and it should reflect your own approach to the assignment rather than just following the same outline.

I have uploaded the example and my on going assisgment that this will be come a part of. 

Thank you for helping me.