- Conduct an internet or library search to locate the information security policy for 2 colleges or universities.
- Identify the first policy you selected and document whether it contains the following elements:
Policy statement, Rationale, who is affected by the policy, Definitions, Roles and responsibilities, Compliance, Related documents, Policy contact - Identify the second policy you selected and document whether it contains the following elements: Policy statement, Rationale, Who is affected by the policy, Definitions, Roles and responsibilities, Compliance, Related documents, Policy contact
- Which policy was more complete or informative? Why?
- As an end-user, which policy was easier to understand? Why?
6.For the first policy, what are your responsibilities for following the policy?
7.For the second policy, what are your responsibilities for following the policy?