It207 Information Technology Security Assessment Answer

The Information Security Policy is one of the most important documents in your Information Security Management System ISMS. An information security policy is one of the mandatory documents outlined in Clause 5.2 of ISO 27001 and sets out the requirements of your (ISMS). The policy should be a short and simple document, approved by the board, that defines management direction for information security in accordance with business requirements and relevant laws and regulations. Discuss with your group members, design a general information security management policy. You may design the complete structure of your information security policy or just choose any specific element as follow: I choose Email Policy Your information security management policy should have (not limited to) these following criteria: I. Overview II. Purpose III. Scope IV. Policy V. Policy Compliance - Compliance Measurement - Exception - Non-Compliance Requirements 1. This assignment will contribute 20% to your final grade. 2. This is a group assignment. Two (2) or Three (3) person in a group. You are required to do all your own work. DO NOT directly copy phrases or sentences from any resources. DO NOT collude with any other groups or plagiarize their work.