Case Study 1: Acceptable Use Policy
An Acceptable Use Policy (AUP) is a very important policy within organizations to define acceptable employee behavior when accessing company resources. Additionally, there are also legal implications within AUPs. Use an existing AUP that you are familiar with, such as from a current or previous workplace, or search on the Internet for an example AUP to complete this case study.
Write a three to five (3-5) page paper in which you:
Describe the purpose of an Acceptable Use Policy you have selected and explain how the AUP helps provide confidentiality, integrity, and availability within the organization.
Critique the AUP you selected and provide recommendations for improving the AUP.
Explain methods that organizations can implement to help ensure compliance with the AUP, mitigate their risk exposure, and minimize liability. Describe how your selected AUP accomplishes these goals.
Describe methods for increasing the awareness of the AUP, and other policies, within the organization.
Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources.
Your assignment must follow these formatting requirements:
Be typed, double spaced, using Times New Roman font (size 12), with one-inch margins on all sides; citations and references must follow APA or school-specific format. Check with your professor for any additional instructions.
Include a cover page containing the title of the assignment, the student’s name, the professor’s name, the course title, and the date. The cover page and the reference page are not included in the required assignment page length.
The specific course learning outcomes associated with this assignment are:
Analyze how security policies help mitigate risks and support business processes in various domains in the information technology (IT) infrastructure.
Describe the different ISS policies associated with the user domain.
Describe different issues related to implementing and enforcing ISS policies.
Use technology and information resources to research issues in security strategy and policy formation.
Write clearly and concisely about Information Systems Security Policy topics using proper writing mechanics and technical style conventions.
“CIPA” Please respond to the following:
From the e-Activity, describe the purpose of CIPA and whom it applies to. Determine why it is important for people attending schools and libraries affected by CIPA to know which schools and libraries must comply with CIPA versus those that do not.
From the e-Activity, determine some of the legal and technical challenges and issues with the implementation of CIPA.
“Domains of IT Responsibility” Please respond to the following:
Select one of the seven domains of IT responsibility and describe what is encompassed within that domain from a security perspective. Include an explanation of the common security controls implemented within the domain that you selected.
Describe the business challenges associated with the domain you selected. Determine the security controls and policies needed to overcome these challenges.