Security policy: A security policy defines an organization’s security requirements. It provides controls and consents needed for meeting requirements. A security policy is a well written document in an organization giving the guidelines to how to protect the organization from threats. It includes computer security threats, and how to handle situations when they do occur. A good security policy must identify all of a company's assets as well as all the potential threats to those assets. The employees of the company need to be kept updated on the company's security policies. The policies themselves should also be updated regularly.

Question

Nearly a decade has passed since the National Academy of Engineers declared Cyber Security a "grand challenge for the next century." Every day there is news on ways in which cyber security challenges and responses are complicating every aspect of our lives. Can the challenge be solved? As a first step to solving any problem, one must understand its nature. So, it is important for all cyber security analysts to keep on top of news stories in the field. In this discussion forum we will do just that with the hope that everyone will make it a daily habit throughout their career. Today, some cyber news has been flooded out of the headlines by Hurricane Harvey, but as noted in this article, cyber concerns are front and center as students return to school.

Answer 1

Question

Chapter 13, Problem 2CE

Program Plan Intro

Security policy:

A security policy defines an organization’s security requirements.

It provides controls and consents needed for meeting requirements.

A security policy is a well written document in an organization giving the guidelines to how to protect the organization from threats.

It includes computer security threats, and how to handle situations when they do occur.

A good security policy must identify all of a company's assets as well as all the potential threats to those assets.

The employees of the company need to be kept updated on the company's security policies.

The policies themselves should also be updated regularly.

Expert Solution & Answer

Trending nowThis is a popular solution!

See solution

Check out sample textbook solution

Students have asked these similar questions

Nearly a decade has passed since the National Academy of Engineers declared Cyber Security a "grand challenge for the next century." Every day there is news on ways in which cyber security challenges and responses are complicating every aspect of our lives. Can the challenge be solved? As a first step to solving any problem, one must understand its nature. So, it is important for all cyber security analysts to keep on top of news stories in the field. In this discussion forum we will do just that with the hope that everyone will make it a daily habit throughout their career. Today, some cyber news has been flooded out of the headlines by Hurricane Harvey, but as noted in this article, cyber concerns are front and center as students return to school.

If you're a network security administrator, one of your responsibilities is to identify and defend your organization's network from malicious malware that spreads on its own. We'll go through numerous strategies for achieving this with you. Describe, in your own words, a workable automated approach for protecting your network.

Question#1 – One of the most sophisticated attacks on record was carried out by a virus known as Stuxnet. Stuxnet first appeared in 2009 but became widely known in 2011 when it was revealed that it had apparently severely damaged or incapacitated the high-speed centrifuges involved in Iran’s uranium enrichment program. Read about Stuxnet and see what strategy/tactics you can devise based on software quality attributes against it