Fluent Essays

Project One Memo Template Complete this template by replacing the bracketed text with the relevant information. DATE: [Insert date] TO: Company Leadership FROM: Information Security Manager SUBJECT: [Insert title] Introduction: [Insert text to describe how the evaluated elements of information security being addressed will support the company’s business objectives.] Laws and Regulations: [Insert text to explain how laws and regulations influence information security policies and procedures within this company.] Technical Controls: [Insert text to describe the technical controls that you would recommend to address at least three indicated information security risks from the consultant’s findings.] Administrative Controls: [Insert text to describe the administrative controls that you would recommend to address at least three indicated information security risks from the consultant’s findings.] Physical Controls: [Insert text to describe the physical controls that you would recommend to address at least three indicated information security risks from the consultant’s findings.] Business Impact: [Insert text to explain how your recommendations impact current information security policies and practices within this company.] Conclusion: [Insert text to explain why leadership should act on these control recommendations to improve the company’s information security posture. Your conclusion can also include a brief summary, although it is not required.] 1 Proj1 Guidelines Competency In this project, you will demonstrate your mastery of the following competency: · Describe the fundamentals of cybersecurity policies and procedures · Explain how the protection of information impacts policies and practices within an organization Scenario You recently stepped into the role of information security manager at a medium-sized e-commerce company with roughly 500 to 1,000 employees organization-wide. The company has hired a third-party consultant to evaluate its information security posture. The consultant has concluded the evaluation and noted several high security risks. These action items must be addressed to ensure that the company’s information assets are secure. Your task is to provide recommendations to address multiple identified security risks and explain your decisions to your leadership team. Directions Memo Template: To communicate the identified information security risks and your recommendations and explanations, you will generate a memo to your leadership team. Your recommendations do not have to address all information security risks; however, they must address multiple risks. Be mindful that your leadership team is considered a nontechnical audience. You must complete each of the following sections: · Introduction: Describe how addressing the evaluated elements of information security will support the company’s business objectives. · Laws and Regulations: Explain how laws and regulations influence information security policies and procedures within this company. · Technical Controls: Describe the technical controls that you would recommend to address the multiple indicated information security risks from the consultant’s findings. · Administrative Controls: Describe the administrative controls that you would recommend to address the multiple indicated information security risks from the consultant’s findings. · Physical Controls: Describe the physical controls that you would recommend to address the multiple indicated information security risks from the consultant’s findings. · Business Impact: Explain how your recommendations impact current information security policies and practices within this company. · Conclusion: Explain why leadership should act on these control recommendations to improve the company’s information security posture. Your conclusion can also include a brief summary, although it is not required. What to Submit To complete this project, you must submit the following: Memo Template This should be a 2- to 3-page Word document (.docx) with the following sections completed: introduction, laws and regulations, technical controls, administrative controls, physical controls, business impact, and conclusion. Supporting Materials The following resource(s) may help support your work on the project: Project One Company Overview Before you start your memo, review the company overview. Reviewing the background of the company is necessary to help you meet the requirements for this project. Project One Consultant Findings Before you start your memo, also review the consultant findings. Reviewing the consultant’s report is necessary to help you meet the requirements for this project. Project One Memo Template You are required to use the provided memo template. The template has the following sections to be completed: introduction, laws and regulations, technical controls, administrative controls, physical controls, business impact, and conclusion.