In about 100 words, describe the steps an organization would ...

[Themember4]

In about 100 words, describe the steps an organization would follow when writing its security policy.

Question 2

Write a paragraph in which you provide one example of an integrity violation.

[Tabitha_2016]

Answer to Question 1

Most organizations follow a four-step process when creating a security policy. These steps include:

• Determine which assets must be protected from which threats. For example, a company that stores customer credit card numbers might decide that those numbers are an asset that must be protected.


• Determine who needs access to various parts of the system or specific information assets. Some of those users might be located outside the organization (for example, suppliers, customers, and strategic partners).


• Identify resources available or needed to protect the information assets while ensuring access by those who need it.


• Using the information gathered in the first three steps, the organization develops a written security policy.

Answer to Question 2

An integrity violation occurs, for example, when an e-mail message is intercepted and its contents are changed before it is forwarded to its original destination. That is, the integrity of the message has been violated. In this particular exploit, which is called a man-in-the-middle exploit, the contents of the e-mail are often altered in a way that changes the messages original meaning.