Based on the reading materials and textbook, decide what are going to be your Top 10 InfoSec policies that you are going to recommend to the company you have selected from the

CYB454 Cybersecurity Planning and Policy

Week 4 Assignment Full Draft Information Security Policy

Student Name:

Company Option #_

Instructor: [Professor’s Name]

Date:

CYB454 Cybersecurity Planning & Policy [Name]

Company Option #_ [Date]

Highest Priority Information Security Policy:

Policy Title/Topic: [Use this space to write the title or topic of the policy; this is NOT

the beginning of the policy itself, just a preliminary descriptor.]

Implementation Strategy: [Use this space to write 3 to 4 paragraphs about how you

would begin to implement the policy within your selected company.]

[Be sure to remove the previous page header – the policy will generally not have headers.]

[Start the Policy (full draft version) at the beginning of a new page, using the

sample format provided below or one that is similar – the use of boxes or lines around the pages are optional and only shown on the sample as an example format. The important content includes the necessary components of the policy header information, the breakdown of the policy sections (with headings), and the policy content itself. Following the formatting of the example policy, it will not use double-line spacing.]

Company XYZ Official Company Policy

Category:

Information Security Policy #

IS-021 Version #

1.1

Policy Title:

Acceptable Use of Company Computer Assets Effective Date:

Nov. 1, 2022

Prior Versions:

This version supersedes Version 1.0 Approving Authority: CISO

The format and structure of a specific policy may vary; although, once an organization has a standard format/structure to policies in general, then all policies should follow that format. For this assignment, students may organize the policy into whatever logical format and structure you see fit. Here is an example: I. Policy Statement II. Scope III. Policy Overview IV. Compliance Program V. Responsibilities and Authorities

[Editorial Note: It is not only beneficial, but may be legally necessary, to include a “Revision History” section at the end of the policy. An example of what a Revision History might look like, is shown below.]

Revision History/Tracking

Revision

Date Version #

Revisions By

(Name & Title) Summary Description of Revisions