Title: Explain the importance of policies, plans, and procedures related to organizational security.
Course: Cybersecurity Network Systems (10108) > Section: Demonstrating Risk Management

Explanation should include

- standard operating procedure
- agreement types
  - business partners agreement (BPA)
  - service-level agreement (SLA)
  - interconnection security agreement (ISA)
  - memorandum of understanding (MOU)/memorandum of agreement (MOA)

- personnel management
  - mandatory vacations
  - job rotation
  - separation of duties
  - clean desk
  - background checks
  - exit interviews
  - role-based awareness training
    - data owner
    - system administrator
    - system owner
    - user
    - privileged user
    - executive user

  - non-disclosure agreement (NDA)
  - onboarding
  - continuing education
  - acceptable use policy/rules of behavior
  - adverse actions

- general security policies
  - social media networks/applications
  - personal email.

Process/Skill Questions:

- How can organizational policies affect one's job?
- Why are employees required to use their work-assigned email?
- Why is it imperative that different people are aware of policies, plans, and procedures?