In this assignment, you will develop corporate policies for system security monitoring, patch management, and updates that cover both wired and wireless components. A web search will provide multiple examples of policy documents. The following resources may also be helpful as you draft your policy documents:
- SANS. No date. https://www.sans.org/blog/cis-controls-v8/?msc=main-nav . https://www.sans.org/critical-security-controls/?msc=main-nav
- This resource provides a list of case studies highlighting how security professionals have made improvements in their security controls.
- SANS. No date. Security Policy TemplatesLinks to an external site.. https://www.sans.org/information-security-policy/
- This resource provides a number of security policy templates that might be helpful in drafting your policy documents.
The specific course learning outcome associated with this assignment is:
- Recommend best practices for monitoring, updating, and patching systems.
Instructions
Write a paper in which you:
- Establish a system security monitoring policy addressing the need for monitoring, policy scope, and exceptions and supported by specific, credible sources.
- Justify the need for monitoring.
- Define the scope of the policy (the personnel, equipment, and processes to which the policy applies).
- Provide guidelines for policy exceptions, if approved by the IT and Security departments.
- Establish a system security patch management and updates policy addressing the need for patch management and updates, policy scope, and exceptions and supported by specific, credible sources.
- Justify the need for patch management and updates, aligned with ISO/IEC 27002.
- Define the scope of the policy (the personnel, equipment, and processes to which the policy applies).
- Provide guidelines for policy exceptions, if approved by the IT and Security departments.
- Support your main points, assertions, arguments, or conclusions with at least four specific and credible academic sources synthesized into a coherent analysis of the evidence.
- Cite each source listed on your source page at least one time within your assignment.
