CS 4673 Cyber Operations
Spring 2023
Assignment 2
Due: 3/26/2023, 11:59 PM CT
50 points
Security Policies
This assignment will help you to prepare for the final project as the information in this assignment will
be useful in conducting one aspect of a cybersecurity assessment.
An organization should have a blanket security policy that describes what is important and what is
expected to protect the organizationàassets. This will then require several additional, more specific
policies. A policy should cover items such as:
•
•
Who (who is this policy applicable to), What (what is this policy addressing), When (when does
this policy apply, for example, all the time or only during an incident) and Why (why is this policy
needed)?
Specifics for the policy, what are the requirements?
What are the ramifications of not following the policy (especially for individuals who do not
follow it)?
Is this policy in place because of a regulatory requirement and if so, what is it?
Policies are not all going to be the same. Taking for an example, an Internet Use Policy may very well be
different for organizations as their environment may require things to be more locked down or may be
more flexible. Additionally, a large organization may have many more policies and they may be much
more extensive. For this assignment, focus on Small and Medium Size Businesses.
Deliverables:
Turn in a report of at least 1000 words that includes:
1) A general introductory statement introducing the topic of security policies and why
organizations need them. Describe why this is important for multi-national corporations and
small businesses alike. (5 points)
2) List the policies an organization should consider. This can be a numbered or bulleted list. For
each policy provide a 2 to 3 sentence description of what this policy should cover and why it is
important to security. (15 points)
3) For a small, non-profit organization, list the policies they should have in place at a bare
minimum. (15 points)
4) A short conclusion/summary of the topic. (5 points)
5) Provide sample templates for the policies you mentioned in item 3. BE SURE TO DOCUMENT
WHERE YOU GOT THE TEMPLATE FROM OR STATE YOU CREATED IT ON YOUR OWN. The
templates do NOT count as part of the 1000-word minimum for this assignment. (10 points)
…ach student is responsible for their own work. You may discuss your thoughts with other
class members, but each class member should write and submit their own paper and draw
their own conclusions. No title page is necessary but include your name on the assignment.
Use a reasonable font and margins and no more than a line spacing of 1.5. The assignment
should be submitted through Blackboard.
?
Grades on the paper will be based on how thoroughly you cover each of the items listed
above.
?
Make sure you appropriately reference any other documents that you use and provide
references for any information you quote from another source! Cite your sources at the point
of the quotation or if you make a statement of fact that is not generally known to the public.

Purchase answer to see full
attachment