Policy and Assurance Term Paper Example | Topics and Well Written Essays - 2500 words

Policy and sanction - Term Paper ExampleAn Information Assurance (IA) policy is one of the mechanisms that an organization could use in order to achieve this.This paper will take the issues in formulating such policy, including an overview of what IA is, the threats it aims to address, the ethics of developing certain rules that concerns rights issues, among other related variables.The United States Department of disproof defined Information Assurance as the tuition operations that protect and defend strike and information systems by ensuring the availability, integrity, authentication, confidentiality and nonrepudiation including the provision for restoration of information systems by incorporating protection, detection, and reaction capabilities. (Boyce and Jennings 2002, p. xii)) This comprehensive definition underscores the breadth of the IAs coverage. But the most important among its functions concern the treats to security which could come from many different areas includ ing but not limited to intentional attacks and also from unintended acts that result from technical, organizational and individual mistakes. It is the human beings who use the information system those who make decisions, who exploit it and use it usually cause uncertainty and risks.According to a study Bidgoli (2006), attacks and threats to information systems within an organization are almost evenly split between those originating from the outside and those from the inside. (p. 4) This point underscores how an Information Assurance policy must aim its operations towards both the outsider and insider attacks of all forms.In developing an organizational information assurance, the fundamental rule in Olivas mind, is to start within the initiative architecture. (p. 32) The reason for this is that all organizations are founded in this framework - from the mission of the organization, how