Examine the implementation issues for IT security policy development. Determine
ID: 3547657 • Letter: E
Question
- Examine the implementation issues for IT security policy development. Determine which of these issues are the most challenging for organizations to overcome and explain why.
- Propose at least three control measures that organizations can implement to mitigate the potential issues associated policy development and implementation.
- Develop a list of the key elements that need to be included in a security awareness program. Analyze how security awareness programs differ from security training programs.
- Examine at least four common hindrances to organizations developing effective security awareness programs and security training programs. Propose solutions to these hindrances.
Explanation / Answer
The Foundation - Information Security Basics In order to understand the value and requirements of a security awareness program it is helpful to first examine a few fundamental information security principles. Security awareness is a single component of a larger security program and should map directly to its goals. The overall objective of an information security program is to protect the confidentiality, availability and integrity (C.I.A) of an organization