Good Security Policy

Question 1

Scenario: a new health care organization establishing their network environment and request a security policy proposal for the organization.

Deliverable: Prepare a well-written security policy proposal for your organization.

Make sure that your proposal includes the basic elements of a good security policy including:

1. Introduction describing your organization and describing its mission, products/services, technical resources, and technical strategy
2. Analysis of the organization’s relationships to its clients/customers, staff, management, and owners or other stakeholders
3. A vulnerability assessment based on the technical resources.
4. Your recommendation, including:
   1. Proposed remedial measures ( these include firewall/gateway provisions, authentication and authorization, encryption systems, intrusion detection, virus detection, incident reporting, education/training, etc.
   2. Proposed code of ethics or code of practice to be applied within the organization
   3. Legal/compliance requirements and description of how they will be met
   4. Proposed security policy statement/summary

Question 2

If you were part of a government entity, what would you say about the potential benefits and drawbacks of encryption? Be sure to cite examples from credible sources to support you answers. Write one page paper.