INFORMATION SECURITY SYSTEM PLANNING

Information security system planning

Based on the reading materials at background section and your own research, prepare a 4-7 page paper to describe what an well designed information security policies should include. Get your insight from

The information security model provided by ISO and NIST
Information security system best practice case
Assignment Expectations
Your paper should provide a summary of your findings from the assigned materials and any good quality resources you can find. Please cite all sources and provide a reference list at the end of your paper. The following items will be assessed in particular:

Ability to consolidate ideas from reading materials.
Demonstration of your understanding on creating the process of information security policies and guidelines
The ability to express your ideas clearly.
Upload your paper when it is done.

Required Readings

Information Security Policies

• org. (n.d.). Information Security Policy Templates. Retrieved from https://www.sans.org/security-resources/policies/
• State of Oklahoma. (2017). Information security: Policy, information security policy, procedures, guidelines procedures, guidelines. Retrieved from https://www.ok.gov/cio/documents/InfoSecPPG.pdf
• Princeton University Office of Information Technology. (n.d.). Information security policy. Retrieved from https://oit.princeton.edu/policies/information-security
• The George Washington University. (2018). Information security. Retrieved from http://my.gwu.edu/files/policies/InformationSecurityPolicyFINAL.pdf
• UW Medicine Compliance. (n.d.). Information Security – Comp.107. Retrieved from http://depts.washington.edu/comply/comp_107/

Information Security Blueprint/Models

• org. (n.d.). An Introduction to ISO 27001, ISO 27002….ISO 27008. Retrieved from http://www.27000.org/index.htm
• (n.d.). ISO IEC 27002 2005 TRANSLATED INTO PLAIN ENGLISH. Retrieved from https://www.praxiom.com/iso-17799-2005.htm
• Bowen, P., Hash, J., & Wilson, M. (2006). Information security handbook: A guide for managers. Retrieved from https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-100.pdf
• Herzog, P. (2010). Open source security testing methodology manual. Retrieved from http://portale.tecnoteca.it/file/OSSTM.pdf
• Tracy, M., Jansen, W., Scarfone, K., & Winograd, T. (2007). Guidelines on securing public Web servers. Retrieved from https://csrc.nist.gov/publications/detail/sp/800-44/version-2/final
• Tracy, M., Jansen, W., Scarfone, K., & Butterfield, J. (2007). Guidelines on electronic mail security. Retrieved from https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-45ver2.pdf
• Chandramouli, R., & Rose, S. (2013). Secure domain name system (DNS) deployment guide. Retrieved from https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-81-2.pdf
• Scarfone, K. K., & Souppaya, M. (2006). Guide to computer security log management. Retrieved from https://www.nist.gov/publications/guide-computer-security-log-management
• Scarfone, K., Jansen, W., & Miles, T. (2008). Guide to general server security. Retrieved from https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-123.pdf
• Information Security Forum. (2016). The standard of good practice for information security 2016. Retrieved from https://www.securityforum.org/uploads/2016/07/SoGP-2016-Exec-Summary-FINAL-260716.pdf
• Myler, E., & Broadbent, G. (2006). ISO 17799: Standard for security. Retrieved from https://people.eecs.ku.edu/~hossein/Teaching/Sp12/711/Readings/iso-17799.pdf
• Fraser, B. (1997). Site security handbook. Retrieved from https://tools.ietf.org/html/rfc2196

Information Security Education and Training

• (n.d.). Awareness, training, & education. Retrieved from https://csrc.nist.gov/projects/awareness-training-education

Contingency Planning

• Pratt, M. (2007). Five tips for building an incident response plan. Retrieved from https://www.computerworld.com/article/2544293/five-tips-for-building-an-incident-response-plan.html
• Bahan, C. (2019). The disaster recovery plan. Retrieved from https://www.sans.org/reading-room/whitepapers/recovery/disaster-recovery-plan-1164
• S. Small Business Administration. (n.d.). Prepare for emergencies. Retrieved from https://www.sba.gov/business-guide/manage-your-business/prepare-emergencies
• gov. (n.d.). Business continuity plan. Retrieved from https://www.ready.gov/business/implementation/continuity
• Van Bos, P. (2010). How to build a business continuity plan. Retrieved from https://www.inc.com/guides/2010/05/business-continuity-plan.html

Optional Materials

• Info-tech Research Group. (2010, June 17). Develop & deploy an air-tight security policy[Video file]. Retrieved from http://www.youtube.com/watch?v=4g0XNTfkBv0