Information Security Policy : A Formal Set Of Rules Users And Networks Within Organizational It Infrastructure Essay

Although the exact challenges in the future are unknown, based on increase in cyber security intrusions, the spread of disease and terrorism on the home front, it can only be assumed that these type of actions will increase. In this case future leaders must be trained to deal with these occurrences. To do so changes must occur not only in training but also in policy. It does the US Army a disservice if policies are not implemented to address the above challenges.

Remote Access. While away from government facilities, and in keeping with Federal telecommuting guidance, a secure remote access capability is implemented within DHS. Users are required to protect equipment and Internet access addresses as well as passwords. DHS, strong Identification & Authentication and encryption controls are used when accessing DHS remote access capability. Government owned equipment is strongly recommended when remotely accessing DHS

This policy establishes the guidelines that the organization follows. This would include an acceptable use policy, an authentication policy, and an incident response policy (“The IT Security Policy Guide”, n.d., pg. 6). This policy will reflect the entire organizations security posture, not just the IT department ideas. A strong policy will help employees understand what is expected of them, and explain to customers how their information is protected.

Management defines information security policies to describe how the organization wants to protect its information assets. After policies are outlined, standards are defined to set the mandatory rules that will be used to implement the policies. Some policies can have multiple guidelines, which are recommendations as to how the policies can be implemented. Finally, information security management, administrators, and engineers create procedures from the standards and guidelines that follow the policies.

The Department of Homeland IT security policy must be uniform, stable, consistent, efficient, effective and compatible with best practices Information Security in the Department. It is the purpose of this security policy to create and implement the best security plans, strategies, and practices throughout the Department. Also, it is the intention of this policy to create safe and secure Cyberspace.

This security profile of the Department of Veterans Affairs (VA) is based on two documents of public record. The first is the published VA Handbook 6500 (VAH 6500) which defined policy and procedures for systems within the purview of the VA (Department of Veterans Affairs, 2007). The second document is the Federal Information Security Management Act Assessment for FY 20011 commissioned by the VA Office of Inspector General (OIG) and performed by Ernst & Young in accordance with Federal Information Security Management Act (FISMA) guidelines (VA Office of Inspector General, 2012, p. i).

This policy provides a framework for the management of information security throughout Cañar Networking organization. It applies to:

During the conference, I was interested in the presentation by Zita Dove and Dean MacMullin about working at the Defense Construction Canada (DCC). Zita Dove was explaining the company that they work for and how they have 33 work sites with almost 1000 people working at those sites. The DCC is a construction company who works for the Department of National Defense (DND). The DND contracts the DCC to do their construction. Since the DCC works for the DND they are working in a security zone. The construction sites are within the military grounds. With the construction being on military rounds the workers need to have the specific security clearance needed to enter the grounds they are working on.

For example a clerk will only be able to access a limited amount of information, such as inventory at each store. The limitations will be different for an accountant or the mangers. All information will be protected with several different layers of security. The first layers will be simple hardware protection for access to the network; from there the security will increase with password protection and restrictions to users. (Merkow & Breithaupt 2006)

Information security is the protection of information against accidental or malicious disclosure, modification or destruction. Information is an important, valuable asset of IDI which must be managed with care. All information has a value to IDI. However, not all of this information has an equal value or requires the same level of protection. Access controls are put in place to protect information by controlling who has the rights to use different information resources and by guarding against unauthorised use. Formal procedures must control how access to information is granted and how such access is changed. This policy also mandates a standard for the creation of strong passwords, their protection and frequency of change.

Thanks for your reply and honest opinion. I must agree with some military security policies lack real depth or scope. Additionally, I have seen the variation of security policies being thorough or finite in specifications and requirements. Furthermore, in some situation a single policy tries to cover physical security, personnel management, and hardware and software, which are separate security policy classifications. (Kumar, n.d.) However, the body, board, or committee of policy makers differs from location to location, and in some cases, lack the experience or fundamental knowledge to develop a proper security policies. In my opinion not one single department nor broad should define a security policy. Additionally, the policy makers

The main ingredients of an effective procurement strategy with reference to the contracting of manned guarding services.

Establishing an effective Information Technology Security Policy Framework is critical in the development of a comprehensive security program. The purpose of the Information Security Policy Framework is to insure your organization will be able to provide the minimum security level necessary to maintain confidentiality, integrity, and availability of the information it collects and uses.

The purpose for an IT security policy is to provide “strategy, policy, and standards regarding the security of and operations in cyberspace, and encompasses the full range of threat reduction, vulnerability reduction, deterrence, international engagement, incident response, resiliency, and recovery policies and activities, including computer network operations, information assurance, law enforcement, diplomacy, military, and intelligence missions as they relate to the security and stability of the global information and communications infrastructure” ("Cyberspace policy RevIew", 2016).

Designing a working plan for securing the organization s information assets begins by creating or validating an existing security blueprint for the implementation of needed security controls to protect the information assets.  A framework is the outline from which a more detailed blueprint evolves.  The blueprint is the basis for the design, selection, and implementation of all subsequent security policies, education and training programs, and technologies.  The blueprint provides scaleable, upgradeable, and comprehensive security for the coming years.  The blueprint is used to plan the tasks to be accomplished and the order in which