Question

1. Explain the significant features we see in threat agents.

2. List the five properties of a good security policy statement.

Answer 1

`Hey,

Note: Brother if you have any queries related the answer please do comment. I would be very happy to resolve all your queries.

2)

The components of a good security policy include:

1. Computer Technology Purchasing Guidelines which specify required, or preferred, security features. These should supplement existing purchasing policies and guidelines.

2. A Privacy Policywhich defines reasonable expectations of privacy regarding such issues as monitoring of electronic mail, logging of keystrokes, and access to users' files.

3. An Access Policywhich defines access rights and privileges to protect assets from loss or disclosure by specifying acceptable use guidelines for users, operations staff, and management. It should provide guidelines for external connections, data communications, connecting devices to anetwork, and adding new software to systems. It should also specify any required notification messages (e.g., connect messages should provide warnings about authorized usage and line monitoring, and not simply say "Welcome").

4. An Accountability Policy that defines the responsibilities of users, operations staff, and management. It should specify an audit capability, and provide incident handling guidelines(i.e., what to do and who to contact if a possible intrusion is detected).

5. An Authentication Policy which establishes trust through an effective password policy, and bysetting guidelines for remote location authentication and the use of authentication devices (e.g., one-time passwords and the devices that generate them).

Note: Brother According to Chegg's policy we are only allowed to answer 1 part if there are many. So, I request you to post other part as separate posts

Kindly revert for any queries

Thanks.