writing organization policy. Name of the policy (Security Awareness and Training Policy) 2. Policy Definition: 3. Purpose 4. Scope 5. Target Audience or Applicability 6. Objectives: Information security is deemed to safeguard three main objectives: • Confidentiality - data and information assets must be confined to people authorized to access and not be disclosed to others; • Integrity - keeping the data intact, complete and accurate, and IT systems operational; • Availability - an objective indicating that information or system is at disposal of authorized users when needed. 7. Standard 8. Roles and Responsibilities 9. Procedures and Guidelines 10 Compliance and Enforcement 11. Non-Compliance and Exceptions 12. References

The two primary goals when designing privacy- preserving systems are to minimize Collection and disclosure Trust and risk Security and compliance Likeability and Replication

Consider "information security" to be a subset of the broader term "security." Describe the differences in occupations between the fields.

Q5)System survivability and Service availability are two important factors in security engineering. Discuss the situations where the importance of both plays a vital role.

Acknowledge the five domains that NIST Cybersecurity Framework (NIST CSF) addresses. a) Recognize, Guard, Spot, Respond, and Recover b) Decide, Examine, Handle, Keep tabs on, Act c) All of the aforementioned d) All of the preceding

________ is a long-standing connection or bond with others. A) attaching B) security C) The term "reguard" D) The term "attachment"

Explain the following “Measures” used to provide system security at organizational level:   Physical - The sites containing computer systems must be physically secured against armed and malicious intruders. The workstations must be carefully protected.   Human - Only appropriate users must have the authorization to access the system. Phishing (collecting confidential information) and Dumpster Diving (collecting basic information so as to gain unauthorized access) must be avoided.   Operating system – The system must protect itself from accidental or purposeful security breaches.   Programs – Usually, Anti Malware programs are used to periodically detect and remove such viruses and threats. Additionally, to protect the system from the Network Threats, Firewall is also be used.   Network – Almost all the information is shared between different systems via a network. Intercepting these data could be just as harmful as breaking into a computer. Henceforth, Network should be properly…

Consider "information security" to be a subset of the broader term "security." Describe the differences in occupations across the fields,

Answer the given question with a proper explanation and step-by-step solution. 1. What member of an organization should decide where the information security function belongs within theorganizational structure? Why? 2. List and describe the options for placing the information security function within the organization. Discussthe advantages and disadvantages of each option. 3. For each major information security job title covered in the chapter, list and describethe key qualifications and requirements for the position. 4. What factors influence an organization’s decisions to hire information security professionals? 5. Prioritize the list of general attributes that organizations seek when hiring information securityprofessionals. In other words, list the most important attributes first. Use the list you developed to answerthe previous review question. 6. What are critical considerations when dismissing an employee? Do they change accord- ing to whether thedeparture is friendly or…

Design an awareness campaign on cybersecurity, write a new policy with the best possible practices for e-mail, the policy must contain: the purpose of the policy, the objective of the policy, the responsibility of all employees, the responsibility of information security personnel, the text of the policy, a policy for e-mail, a policy for opening attachments . Write five types of awareness followed by the target group, educational content, start date/end date, goal, for each type of awareness.