{"id":132922,"date":"2023-09-14T12:54:05","date_gmt":"2023-09-14T12:54:05","guid":{"rendered":"https:\/\/assignmenttutors.net\/blog\/lab-3-developing-a-security-policy-framework-implementation-plan\/"},"modified":"2023-09-14T12:54:05","modified_gmt":"2023-09-14T12:54:05","slug":"lab-3-developing-a-security-policy-framework-implementation-plan","status":"publish","type":"post","link":"https:\/\/assignmenttutors.net\/blog\/lab-3-developing-a-security-policy-framework-implementation-plan\/","title":{"rendered":"Lab 3 developing a security policy framework implementation plan"},"content":{"rendered":"
\n

Part 1: Research Security Policy Frameworks (0\/2 completed)<\/strong><\/p>\n

Note:<\/strong> In this part of the lab, you will review internet resources on security policy frameworks in order to form a basis for their purpose and usage. Understanding the reason behind a security policy framework is key to understanding the component policies and procedures. Please take the time to review the research thoroughly and think through the concepts behind the framework itself.<\/p>\n

1. In your browser, navigate<\/strong> to https:\/\/www.sans.org\/reading-room\/whitepapers\/policyissues\/information-security-policy-development-guide-large-small-companies-1331<\/strong><\/u><\/a>.<\/p>\n

2. Read Sections 1-5<\/strong> of the SANS Policy Development Guide.<\/p>\n

3. Summarize\u00a0<\/strong>the Policy Development Guide’s recommendations for organizing a policy hierarchy and selecting policy topics.<\/p>\n

Note:<\/strong> It is important to understand how and why a policy differs from a standard, a procedure, and a guideline. From the top down, the policy should not change or need modification unless a major shift in corporate values or business process occurs. On the contrary, guidelines should be reviewed, and possibly changed, often.<\/p>\n

Similarly, even though a policy should be written clearly and concisely, it is a high-level document answering the \u201cwhy\u201d questions. Standards are also high level, but they answer the \u201cwhat\u201d questions. Finally, the procedures and guidelines provide the \u201chow.\u201d<\/p>\n

Examples of security policy and guideline templates are available from the SANS Institute at https:\/\/www.sans.org\/information-security-policy\/.<\/u><\/a><\/p>\n

In the next steps, you will learn about COBIT 2019, a popular industry-standard policy framework.<\/p>\n

4. \u00a0In your browser, navigate<\/strong> to https:\/\/www.cio.com\/article\/3243684\/what-is-cobit-a-framework-for-alignment-and-governance.html<\/strong><\/u><\/a>.<\/p>\n

5. Describe<\/strong> the core principles and objectives of COBIT 2019.<\/p>\n

Part 2: Define a Security Policy Framework (0\/2 completed)<\/strong><\/p>\n

Note:<\/strong> Understanding both unique and universal risks to your organization’s IT infrastructure is essential to developing an appropriate IT security policy framework for your organization. In this part of the lab, you will review a list of risk, threats, and vulnerabilities and define appropriate policies to mitigate them. Next, you will organize your policies into a policy framework.<\/p>\n

1. Review<\/strong> the following list of risks, threats, and vulnerabilities at the fictional Healthwise Health Care Company.<\/p>\n