1. TEL382 Homework Assignments

2. Outline HW#1 Find and Review/Describe 3 Existing IS Policy Manuals HW#2 Perform Qualitative Risk Analysis for Organization HW#3 Describe 3 Areas Where Policies Needed HW#4 Describe Trade Space and Write Policy Statements for Acceptable System Use, Access, Asset Classification HW#5 Describe IA Policy Team Membership HW#6 Describe Trade Space and Write Policy Statements for Personnel, Email, Malware HW#7 Describe Potential Disasters An Organization May Face HW#8 Summarize 5 Information Assurance Policy Jobs HW#9 Summarize 5 IT Business Continuity/Disaster Recovery Jobs HW#10 10 Suggested Exam Questions and Answers for Assessment#2

3. HW#1 Find and Review/Describe 3 Existing IS Policy Manuals Search Internet for IS Security Policy Manuals for an organization, a university, etc. Read each and summarize the contents in sufficient detail Comment on format, contents (policies), what is good/bad, what may be missing Thoroughly document your sources

4. HW#2 Perform Qualitative Risk Analysis for Organization Using format from class, create Excel Spreadsheet listing at least 5 assets Assign and Explain in detail the values chosen for risk and cost

5. HW#3 Describe 3 Areas Where Policies Needed Create list of three areas of IS security in an organization where security policies may be needed Individually justify why each of these policies are required in addition to or instead of hardware/software security solutions

6. HW#4 Describe Trade Space and Write Policy Statements for Acceptable System Use, Access, Asset Classification A trade space lists the “extremes” for an area –“Should I go to college?” If I do, it will take time & money If I don’t, it will limit my career opportunities and income Describe the trade space concerns for the 3 areas listed Using correct format and “reasonable results from the trade space analysis performed”, write policy statements for the 3 areas listed

7. HW#5 Describe IA Policy Team Membership For a typical organization, list 5 to 10 individuals who could/should be on the IA Policy Development Team Describe in detail why they should be on the team; i.e., what important knowledge or understanding do they bring to the team?

8. HW#6 Describe Trade Space and Write Policy Statements for Personnel, Email, Malware A trade space lists the “extremes” for an area –“Should I go to college?” If I do, it will take time & money If I don’t, it will limit my career opportunities and income Describe the trade space concerns for the 3 areas listed Using correct format and “reasonable results from the trade space analysis performed”, write policy statements for the 3 areas listed

9. HW#7 Describe Potential Disasters An Organization May Face List and describe 10-15 potential disasters that may befall a typical organization Describe how it may impact the organization and mention possible means of avoiding or recovering from the effect of the disaster

10. HW#8 Summarize 5 Information Assurance Policy Jobs Using any of the typical resources for finding employment opportunities, find and SUMMARIZE 5 jobs dealing with information system security policies Describe organization, title, responsibilities, background required, salary (if listed), etc. Provide detailed reference for where information was obtained

11. HW#9 Summarize 5 BCP/DRP Jobs Using any of the typical resources for finding employment opportunities, find and SUMMARIZE 5 jobs dealing with information system Business Continuity Planning/Disaster Recovery Planning Describe organization, title, responsibilities, background required, salary (if listed), etc. Provide detailed reference for where information was obtained

12. HW#10 10 Suggested Exam Questions and Answers for Assessment#2 Create 7 Multiple Choice questions that could be used in an assessment –Provide question and list of answers (indicating correct choice) –Describe how/why answer is correct; your source Create 3 Essay questions that could be used in an assessment –Provide question and what the correct answer should contain –Describe how/why answer is correct; your source Insufficient effort (question difficulty) will result in a grade of “0” zero for this assignment –QUESTION: What is 1 + 1?