Fluent Essays

Attached Files:  Sept-Oct_2018_ISP_ONLINE_R.pdf Sept-Oct_2018_ISP_ONLINE_R.pdf - Alternative Formats (6.275 MB) Information security uses administrative, technical (logical), and physical controls to mitigate risks related to organizations assets.  A policy is an administrative control. If no policy exist in the IT department, research shows that employees will default to a defacto policy.  A defacto policy means a policy that is in effect ,but not formally recognize.  To stop this for happening, It is important for students to understand how to take the cloud best practices discussed throughout this course and use them to create a cloud security policy.  Cloud security fundamentals and mechanisms is a huge part of the cloud security policy.  For this assignment, read the attached article: Our Journey to the Cloud.  Use the   SANS email policy template SANS email policy template - Alternative Formats   to create a policy for the cloud.  Please note, the SANS policy is a template you can use to structure your policy.  If you are having trouble with the links above, these supporting documents can be found in the Cloud Policy Assignment Documents folder.Consensus Policy Resource Community Email Policy Free Use Disclaimer: This policy was created by or for the SANS Institute for the Internet community. All or parts of this policy can be freely used for your organization. There is no prior approval required. If you would like to contribute a new policy or updated version of this policy, please send email to [email protected] . Things to Consider: Please consult the Things to Consider FAQ for additional guidelines and suggestions for personalizing the SANS policies for your organization. Last Update Status: Updated Overview Electronic email is pervasively used in almost all industry verticals and is often the primary communication and awareness method within an organization. At the same time, misuse of email can post many legal, privacy and security risks, thus it’s important for users to understand the appropriate use of electronic communications. Purpose The purpose of this email policy is to ensure the proper use of <Company Name> email system and make users aware of what <Company Name> deems as acceptable and unacceptable use of its email system. This policy outlines the minimum requirements for use of email within <Company Name> Network. Scope This policy covers appropriate use of any email sent from a <Company Name> email address and applies to all employees, vendors, and agents operating on behalf of <Company Name>. Policy 4.1 All use of email must be consistent with <Company Name> policies and procedures of ethical conduct, safety, compliance with applicable laws and proper business practices.  4.2 <Company Name> email account should be used primarily for <Company Name> business-related purposes; personal communication is permitted on a limited basis, but non-<Company Name> related commercial uses are prohibited. 4.3 All <Company Name> data contained within an email message or an attachment must be secured according to the Data Protection Standard. 4.4 Email should be retained only if it qualifies as a <Company Name> business record. Email is a <Company Name> business record if there exists a legitimate and ongoing business reason to preserve the information contained in the email. 4.5 Email that is identified as a <Company Name> business record shall be retained according to <Company Name> Record Retention Schedule. 4.6 The <Company Name> email system shall not to be used for the creation or distribution of any disruptive or offensive messages, including offensive comments about race, gender, hair color, disabilities, age, sexual orientation, pornography, religious beliefs and practice, political beliefs, or national origin. Employees who receive any emails with this content from any <Company Name> employee should report the matter to their supervisor immediately. 4.7 Users are prohibited from automatically forwarding <Company Name> email to a third party email system (noted in 4.8 below). Individual messages which are forwarded by the user must not contain <Company N