Module 3
Ch-4
Ex 2. Search your institution’s intranet or Web site for its security policies. Do you find an
enterprise security policy? What issue-specific security policies can you locate? Are all of
these policies issued or coordinated by the same individual or office, or are they scattered
throughout the institution?
Ex 3. Using the framework presented in this chapter, evaluate the comprehensiveness of each policy you located in Exercise 2. Which areas are missing?
Ex 4. . Using the framework presented in this chapter, draft a sample issue-specific security
policy for an organization. At the beginning of your document, describe the organization for
which you are creating the policy and then complete the policy using the framework.
Ch-5
Ex 1. Search the term “security awareness” on the Internet. Choose two or three sites that
offer materials and services and describe what they offer?
Ex 2. Choose one of the Web sites you found in Exercise 1 that you think might work for a security awareness program at your institution. Write a short essay about how you would go about getting that awareness material or service into place on your campus.
Ex 6. Draft a work breakdown structure for the task of implementing and using a PC-based
virus detection program (one that is not centrally managed). Don’t forget to include tasks to
remove or quarantine any malware it finds





