Writing simple security Policies
Budget: ₹1,500 – ₹12,500 INR
A well-defined security policy document should include
1. Acceptable Use Policy
2. Password Policy
3. Data Ownership and Retention Policy
4. Data Classification Policy
Security Policy document must include Overview/Introduction, purpose, scope, policy,
definition, responsibilities, penalties, and revision history.
Prepare a security document complete in all aspects. Make the assumptions regarding system if the information is not obvious and mentioned in the scenario.
You can refer to Template for information security policies
https://resources.infosecinstitute.com/topic/key-elements-information-security-policy/
(Note: this is an example, you can follow any template that you feel is best to the scenario. )Important is you stay consistent throughout the document.)
Scenario:Apex is one of the fastest growing financial institution in North America. As a system utility they
deliver the benefits of scale by serving a broader range of financial services. They develop
strategies, products and services that support their customers wise-investment decisions.
Some of the services that they offer are payment and clearing services, investment banking
services, facilitate electronic transaction services, primary liquidity facility, centralized cheque
processing, Internet banking, bill payment, wholesale financial services, digital banking, mobile
banking, and payments modernization.
It is an organization with around 5000 employees. Your team have been assigned a task of
Information Security Analyst to create an Information Security Document to ensure a secured
operating environment for its business operations
1. Acceptable Use Policy
2. Password Policy
3. Data Ownership and Retention Policy
4. Data Classification Policy
Security Policy document must include Overview/Introduction, purpose, scope, policy,
definition, responsibilities, penalties, and revision history.
Prepare a security document complete in all aspects. Make the assumptions regarding system if the information is not obvious and mentioned in the scenario.
You can refer to Template for information security policies
https://resources.infosecinstitute.com/topic/key-elements-information-security-policy/
(Note: this is an example, you can follow any template that you feel is best to the scenario. )Important is you stay consistent throughout the document.)
Scenario:Apex is one of the fastest growing financial institution in North America. As a system utility they
deliver the benefits of scale by serving a broader range of financial services. They develop
strategies, products and services that support their customers wise-investment decisions.
Some of the services that they offer are payment and clearing services, investment banking
services, facilitate electronic transaction services, primary liquidity facility, centralized cheque
processing, Internet banking, bill payment, wholesale financial services, digital banking, mobile
banking, and payments modernization.
It is an organization with around 5000 employees. Your team have been assigned a task of
Information Security Analyst to create an Information Security Document to ensure a secured
operating environment for its business operations