Part 1: Law and Your IT Environment

Learning Objectives and Outcomes

Identify the basic components of the American Legal System.

Describe legal compliance laws addressing public and private institutions. Identify risk analysis and incident response procedures.

Assignment Requirements

In this assignment you will continue work on the IT Security and Compliance Policy Document that you started last week in which you assessed risk. Now, complete Part 2 as directed below.

Part 2: Overview of Compliance

Part 2 of your IT Security and Compliance Policy Document will include the following sections:
- An overview of Compliance with each of these laws in your current organization or the example you have been working with

o GLBA http://business.ftc.gov/privacv-and-security/gramm-leach-blilev-act
o PCI http://www.pcicompliancequide.orq/aboutpcicompliance.php
o FERPA http://www2.ed.gov/policy/gen/guid/fpco/ferpa/index.html
o HIPAA https://www.cms.gov/hipaageninfo/
o SOX http://www.sec.gov/spotlight/sarbanes-oxlev.htm
- What critical steps does your current IT Security Compliance Policy lack?
- What measures and processes do you have in place (hardware, software, people, and training) to ensure your business can reach compliance?

Learning Objectives and Outcomes
Describe legal compliance laws addressing public and private institutions. Describe the role of contracts in online transactions and cyberspace. Identify risk analysis and incident response procedures.

Assignment Requirements
In this assignment you will continue work on the IT Security and Compliance Policy Document that you started in week one. Now, complete

Part 3: Organizational Risk

Part 3 of your IT Security and Compliance Policy Document will include the following sections:
- Risks and Challenges with your current Organizational environment.
- What critical steps are missing from your current IT Security Compliance Policy.
- What measures and processes do you have in place (hardware, software, people, and training) to ensure your business can reach compliance and manage FISMA?
- Make sure you use viable feedback from your peers from the Discussion forum.

Learning Objectives and Outcomes
Analyze intellectual property laws.
Describe the role of contracts in online transactions and cyberspace. Identify risk analysis and incident response procedures.
Assignment Requirements
In this assignment you will continue work on the IT Security and Compliance Policy Document that you started in week one. Now, complete

Part 4: Intellectual Property

Part 4 of your IT Security and Compliance Policy Document will include the following sections:
- Risks and Challenges with your current Intellectual Property (DCMA) environment.
- What critical steps are missing from your current IT Security Compliance Policy.
- What measures and processes do you have in place (hardware, software, people, and training) to ensure your business can reach compliance and manage your Intellectual Property?
- Make sure you use viable feedback from your peers from the discussion forum.

Learning Objectives and Outcomes
Identify cybercrime and tort law Issues in cyberspace.
Examine the principles requiring governance of information within organizations. Identify risk analysis and incident response procedures.
Explain the importance of forensic examination in legal proceedings.
Assignment Requirements
In this assignment you will continue work on the IT Security and Compliance Policy Document that you started in week one. Now, complete

Part 5: Intellectual Property

You will need to incorporate the Risk Assessment you conducted in this week's Lab regarding the Security Breach Policy, and include the following:
- Highlight your current policy along with your risk assessments.
- Compile and provide a high level Security Breach Policy based on YOUR assessment and requirements.
- Make sure you use viable feedback from your peers from the discussion forum.