Key Assignment Draft

Key Assignment Draft

This week, you will submit a draft of your Key Assignment template. Be sure to add the new material to this document in Section 4. Remember to incorporate any previous feedback into the appropriate sections. The submission should contain the following information:

• Security Management Document shell
  • Use Word
  • Title page
    • Course number and name
    • Project name
    • Your name
    • Date
  • Table of Contents (TOC)
    • Use an autogenerated TOC.
    • This should be on a separate page.
    • This should be a maximum of 3 levels deep.
    • Be sure to update the fields of the TOC so that it is up-to-date before submitting your project.
  • Section Headings
    • Week 1: Introduction to Information Security
      • This section will describe the organization and establish the security model that it will use.
    • Week 2: Security Assessment
      • This section will focus on risks that are faced by organizations and how to deal with or safeguard against them.
    • Week 3: Access Controls and Security Mechanisms
      • This section examines how to control access and implement sound security controls to ensure restricted access to data.
    • Week 4: Security Policies, Procedures, and Regulatory Compliance
      • This section will focus on the protection of data and regulatory requirements that the company needs to implement.

The case study company is also concerned about the confidentiality and integrity of the data. What policies and controls are needed to meet the regulatory requirements imposed by the recent initial public offering (IPO)? In an effort to ensure the confidentiality of data both internally and externally, discuss how you can effectively protect the data in motion and at rest. Create the following section for Week 4:

• Week 4: Security Policies, Procedures, and Regulatory Compliance
  • List and describe the regulatory requirement that was introduced by the IPO.
  • List and describe at least 5 policies that the company needs.
  • From the list of policies, list and describe at least 3 controls that the company needs to implement.
  • Describe the data at rest and data in motion and how they can be protected
• Section 4 should be 2–3 pages long.
• Name the document “IP4.doc.”