This project is divided into two parts.

the first part (Project 2a), you will complete the policy document and submit it to TurnItIn.

Then, you will reformat your policy using the provided policy template (paste your content into the appropriate sections).

There are two deliverables for this assignment:
1. Completed Local IT Policy (Project 2a)
2. Completed Local IT Policy Reformatted Using the Policy Template (Project 2b)

Security policy is based on choosing the appropriate controls to protect the organization. Choose an organization from industry, government, private business, or military that you want to protect from unauthorized access. You may choose from any established industry, any government organization or military division such as General Dynamics, Department of Defense, Department of State, United States Air Force, etc. You are protecting the data center from unauthorized access. This requires that you write a policy for protecting the data center from unauthorized access by preventing personnel who are not authorized to use the resources of the organization from gaining access and potentially causing harm.

You will write a local policy to prevent unauthorized access by mandating that the data center in your organization follow your policy.

Your policy is being written by you as the information system owner (person responsible for the data center). Your instructions are being written for the Tier 1 staff. Tier 1 staff are the technicians. You are the supervisor of the technicians. This is considered a local policy. An enterprise policy contains all major procedures for security the enterprise. A local policy is based on certain controls with a specific function. Choose the appropriate controls below and write a local policy.

Complete the attached template for the policy to prevent unauthorized access by developing effective passwords in the data center. Submit the template to your assignment folder by the due date in your syllabus. The template is a guide for you to develop the policy based on access controls and effective password strategy for the development of the security policy.