Project 2 – Manager’s Deskbook (IT Security)

Company Background & Operating Environment

Use the assigned case study for information about “the company.”

Policy Issue & Plan of Action

The Manager’s Deskbook contains issue specific policies and implementation procedures which are required to mitigate risks to the company and to otherwise ensure good governance of the company’s operations. The Chief Information Security Officer (CISO) and key CISO staff members held a kick-off meeting last week to identify issue specific policies which should be added to the company’s policy system in the IT Governance category. The policies will be disseminated throughout the company by incorporating them into the Manager’s Deskbook. The required issue specific policies are:

• Data Breach Response Policy
• Preventing / Controlling Shadow IT Policy
• Management and Use of Corporate Social Media Accounts Policy