CMIT320
Security Policy Paper
Week 3

Table of Contents

Introduction: GDI background and given problem……………………………………… 1

Important Assets…………………………………………………………………………. 2

Security Architecture for GDI…………………………………………………………… 3

Twenty Possible Security Policies………………………………………………………. 4

Details and Rationale of the Twenty Security Policies………………………………….. 5

Twelve Security Policies that should be Applied to GDI……………………………….. 6

Conclusion……………………………………………………………………………..… 7

References……………………………………………………………………………….. 8

Outline I. Introduction a. Briefly discuss the background of GDI. b. Also, discuss about the given problem of the IT security, infrastructure, cost, etc. II. Discuss the important assets of the company that need protection c. Asset identification: “Identity and quantify the company’s assets” (Meyers, 2009, p. 215) i. Important assets include: 1. Computer network equipment (Meyers, 2009, p. 215) 2. Data (Meyers, 2009, p. 215) 3. Servers, printers 4. Routers, firewalls, switches, wireless devices, etc. d. Access control methods: sensitivity, integrity, availability (Meyers, 2009, p. 157). e. Risk and threat assessment: “Identify and access the possible security vulnerabilities and threats” (Meyers, 2009, p. 215). f. Identify solutions and countermeasures: “Identify a cost-effective solution to protect assets” (Meyers, 2009, p. 215). III. Security architecture for the company g. “The IT department should always have current diagrams of your overall network architecture on hand” (Meyers, 2009, p. 381). IV. A list of 20-30 possible policies that could be applied to this situation h. User Account Policy (Meyers, 2009, p. 170) i. Audit Security Policy (SANS) j. Email Security Policy (SANS)