Chapter 4, Problem 5RQ

Program Plan Intro

Information security policy:

Information security policy defines the set of rules of all organization for security purpose.

• It helps the employees what an organization required, how to complete the target and where it wants to reach.
• It helps to manage data access, web-browsing behaviors, passwords usage and encryption, email attachments, etc.
• It is designed to provide structure in the workplace, create a productive and effective work place.
• It is free from unnecessary distractions.

Explanation of Solution

Bull’s eye model policy in the InfoSec program:

• Bull’s eye model policy is the initial viewpoint that maximum users will interact with InfoSec...