CYS1130 - Security Policies and Implementation Issues

Policy I

• Incident Response Plans
• Incident Response Process
• Exercises
• Attack Frameworks
• Stakeholder Management
• Communication Plan
• Disaster Recovery Plan
• Business Continuity Plan
• Continuity of Operations Planning (COOP)
• Incident Response Team
• Retention Policies
• Review Key Topics

Policy II

• Personnel Policies
• Diversity of Training Techniques
• Third-Party Risk Management
• Data Concepts
• Credential Policies
• Organizational Policies
• Review Key Topics

Regulation

• Regulations, Standards, and Legislation
• Key Frameworks
• Benchmarks and Secure Configuration Guides
• Review Key Topics

Legal

• Organizational Consequences of Privacy and Data Breaches
• Notifications of Breaches
• Data Types and Asset Classification
• PII
• PHI
• Privacy Enhancing Technologies
• Roles and Responsibilities
• Information Lifecycle
• Impact Assessment
• Terms of Agreement
• Privacy Notice
• Review Key Topics

Policy Paper Assignment