IT Security Policy Design and Implementation

This week’s topics

IT Security Policy Design and Implementation

1. Drafting acceptable use and access control policies
2. Incident response and reporting procedures
3. Implementation roadmap and change management
4. Policy compliance auditing and revision cycles
5. Security Policies - CompTIA Security+ SY0-701 - 5.1
6. Incident Response VS Incident Management | The Incident Commander Series Ep. 1
7. Compliance - CompTIA Security+ SY0-701 - 5.4

What you will be able to do

• 4.4 Design and implement an IT security policy for an organisation.

Activity

Start with this week’s 3 videos, then: Seminar, guided reading and a short written task: design and implement an IT security policy for an organisation.

Study materials

Videos

• Security Policies - CompTIA Security+ SY0-701 - 5.1 · YouTube · Professor Messer · 11 min · for registered students
• Incident Response VS Incident Management | The Incident Commander Series Ep. 1 · YouTube · SANS Institute · 9 min · for registered students
• Compliance - CompTIA Security+ SY0-701 - 5.4 · YouTube · Professor Messer · 8 min · for registered students

Further resources

• ENISA: NIS2 Technical implementation guidance on cybersecurity risk-management measures (v1.0) · PDF · Enisa, guidance; 170 pages · for registered students
• NIST SP 800-61 Rev. 3: Incident Response Recommendations and Considerations for Cybersecurity Risk Management · PDF · NIST, guidance; 48 pages · for registered students
• Cyber Governance Code of Practice (DSIT/NCSC) · PDF · NCSC, guidance; 12 pages · for registered students