Internet Technology Security Management Security Policy Content and Risk IP3

Type: Security Management

Unit: Security Policy Content and Risk

Deliverable Length: 2-3 Pages

APA STYLE REFERENCE WITH IN -TEXT CITATIONS

Create a list of each section in the security policy. Some sections in the list are business security requirements that can be decomposed first to more refined requirements and later to detailed security policies in the Security Policy document. This decomposition should be included in the list. These detailed policies do not need to be written, but referenced or indicated as a policy that needs to be written.

Security Policy

• List each section of the security policy.

o Include American Airlines, decompositions of business security requirements into policies in this list.

For example, a business security requirement for authenticated access might map to policies for log-in access and policies for file access.