Develop a Policy Document for your Profiled Organization in direct support of your Cyber Strategy

Assessment information

Overview

In this assessment, you will develop (or re-develop) a Policy document for your profiled organization (A2). The Policy you develop must be in direct support of your Cyber Strategy (A3). If you profiled a fictitious organization your policy will be new, if you profiled a real organization, you may optionally re-develop an existing policy document (with a few caveats described below).

Your task is to demonstrate the ability to craft clear policy statements that set sensible rules that are robust to technological change (within reason) and that are hard to misinterpret. Further, you will provide a rationale as to how the policy supports your strategy and the intended impact of new rules.

Instructions

This assessment has two components, a policy document that will support the strategy you developed in Assessment 3, and secondly an analysis and rationale where you will describe the intended alignment and impact you hope the policy to have.

For those of you who profiled a real organization:

Before unpacking the instructions, for those of you who profiled a real organization, there are a few important points to note.

1. You may use a real existing policy as a starting point, unlike in Assessment 3.
2. You can choose to create a policy from scratch. Irrespective of if the organization already has a policy in that space.
3. If you plan to update an existing policy, you must be able to attach (as an appendix) the policy in question. This is not optional.
4. If your organization does not publicly publish policies, please seek permission from your organization to include it as an appendix, or at least the statements that you choose to rewrite (we need to be able to see before and after).

Part 1: Policy development

Policy documents can get quite large, and some topics lend themselves to quite a lot of detail. You have a fair bit of freedom in the development of your policy, however, there are a few elements that are essential. Your policy must include:

• A purpose statement
• A scope statement
• A series of policy statements
• A related documents section

It is the policy statements that can get wordy. As such, select only 3 topics within the policy you are drafting and focus on creating high-quality policy statements. Ensure the topics you select directly relate to your strategy. If there are other critical statements/rules (past the three you choose to develop), please list them so we can see you have thought through the development holistically.

For example, an email policy might include a range of policy statements including regulations, retention rules, training rules, or even ethical considerations. However, you may choose to write statements relating to the right to read, external access, and termination of access (assuming they relate directly to your strategy); and simply provide headings for the remaining topics.

Policy Checklist

• Clearly define a policy creation process
• Write policies to survive 2-5 years
• Use directive wording
• Avoid technical implementation details
• Keep length to a minimum
• Provide navigation from the policy to the supporting documentation
• Thoroughly review before publishing
• Conduct a management review and sign-off
• Avoid techno-speak
• Review incidents and adjust policies
• Periodically review policies
• Develop sanctions for non-compliance

A few points to consider:

• The focus of this assessment is on crafting high-quality policy statements. These statements, and their related rationale in part 2, should be your primary focus.
• Don't disregard the mechanical sections of a policy, a clear purpose and scope are critical inclusions (if your policy is to be well understood).
• The policy can never exist in a vacuum, think about the other policies, procedures, and/or standards that would be required to support your policy and list them in the related documents section.
• There is no strict word count divided between part 1 and part 2. Ensure you have given your policy statements enough words to be clear and not cut any corners. Refer to the rubric to check the weights for each criterion and plan appropriately.
• Don't forget to include original policy statements as an appendix where appropriate. These will be excluded from your word count.

Part 2: Rationale

Your rationale is an opportunity for you to describe why you chose the policy topic and the specific statements in the context of the stated goals and principles within your strategy. Secondly, you will discuss the impact you hope the policy will have.

A few points to consider:

• Place the Policy (Part 1) and this Rational (Part 2) in the same document.
• This rationale should be presented in essay form.
• Use APA style referencing for any citations (references are excluded from the word count)
• When discussing impact, consider other levers the organization might need to be successful. Are there technical controls in place? Will you rely on industry best practices (references required)?
• When describing why you picked the policy statements to flesh out, if you're unable to articulate why they support your strategy or find yourself describing their impact and cant link back to the goals or principles within your strategy, you may need to loop back to your policy statements and consider some re-work before submitting. Remember that a portion of your grade relates to alignment (see rubric).

This Management Assignment has been solved by our Management Expert at Exam Question Bank. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well-trained to follow all marking rubrics & referencing Styles. Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turn tin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.