Components Security Awareness Training and Education SATE Programs

Components Security Awareness Training and Education SATE Programs

TechFite Case Study

Task 2

A1. (ETHICAL)

Find and list two organizations with ethical guidelines, e.g., GIAC, NIST, ISO/IEC 27002; an ETHICAL guideline used by each; and the relevance/tie of each of those guidelines to a specific instance from the TechFite case study.

Organization 1:

• Name of organization:
• Ethical guideline:
• Case study tie-in:

Summary of Organizational Ethical Guideline and Tie-in 1

<Write section summary here. Include ALL the details identified above for organizational ethical guideline and tie-in 1.>

Organization 2:

• Name of organization:
• Ethical guideline:
• Case study tie-in:

Summary of Organizational Ethical Guideline and Tie-in 2

<Write section summary here. Include ALL the details identified above for organizational ethical guideline and tie-in 2.>

A2. (UNETHICAL)

List two UNETHICAL behaviors/omissions of behavior in the TechFite case and the corresponding practices they fostered; and the specific actor that committed the behavior.

Organization 1:

• Name of organization:
• Unethical practice:
• Case study tie-in:

Summary of Organizational Unethical Practice and Tie-in 1

<Write section summary here. Include ALL the details identified above for organizational unethical practice and tie-in 1.>

Organization 2:

• Name of organization:
• Unethical practice:
• Case study tie-in:

Summary of Organizational Unethical Practice and Tie-in 2

<Write section summary here. Include ALL the details identified above for organizational unethical behavior and tie-in 2.>

A3. Discuss what factors at TechFite led to lax ethical behavior.

Contributing Factor 1

Describe factor 1:

Behavior fostered:

Summary of Organizational Lax Ethical Behavior 1

<Write section summary here. Include ALL the details identified above for organizational lax ethical behavior 1.>

Contributing Factor 2

Describe factor 2:

Behavior fostered:

Summary of Organizational Lax Ethical Behavior 2

<Write section summary here. Include ALL the details identified above for organizational lax ethical behavior 2.>

B1. Describe TWO missing information security policies that may have prevented or reduced the criminal activity, deterred the negligent acts, and decreased the threats to intellectual property.

Missing Information Security Policy 1

Missing policy name 1:

Criminal activity reduction/prevention:

Negligent acts decrease:

Threat to Intellectual property decrease:

Summary of Missing Information Security Policy 1

<Write section summary here. Include ALL the details identified above for missing information security policy 1.>

Missing Information Security Policy 2

Missing policy name 2:

Criminal Activity reduction/prevention:

Negligent acts decrease:

Threat to Intellectual property decrease:

Summary of Missing Information Security Policy 1

<Write section summary here. Include ALL the details identified above for missing information security policy 1.>

B2. Describe the key components of a security awareness training and education (SATE) programs that could be implemented at TechFite.

SATE component 1

Name of training program:

Description of training program:

Potential impact for TechFite:

Summary of Suggested Training Component 1

<Write section summary here. Include ALL the details identified above for suggested training component 1.>

SATE component 2

Name of training program:

Description of training program:

Potential impact for TechFite:

Summary of Suggested Training Component 2

<Write section summary here. Include ALL the details identified above for suggested training component 2.>

B2a. Plan for how the SATE program will be communicated to TechFite employees.

<Describe explicitly in detail how the SATE program will be communicated to employees.>

B2b. Justification for the SATE program’s relevance to mitigating undesirable behaviors at TechFite.

Remediation of Undesirable Behavior 1

• Undesirable behavior being remediated:
• Training addressing remediation efforts.

Summary of Suggested Remediation and Training 1

<Write section summary here. Include ALL the details identified above for suggested remediation and training 1.>

Remediation of Undesirable Behavior 2

• Undesirable behavior being remediated:
• Training addressing remediation efforts.

Summary of Suggested Remediation and Training 1

<Write section summary here. Include ALL the details identified above for suggested remediation and training 1.>

1. Summarize TWO or MORE ethical challenges and recommended mitigations of them.

Remediation of Ethical Challenges 1

• Ethical challenge 1 being remediated:
• Training addressing remediation efforts for ethical challenge 1:

Summary of Suggested Remediation and Training for Ethical Challenge 1

<Write section summary here. Include ALL the details identified above for suggested remediation and training for ethical challenge 1.>

Remediation of Ethical Challenges 2

• Ethical challenge 2 being remediated:
• Training addressing remediation efforts for ethical challenge 2:

Summary of Suggested Remediation and Training for Ethical Challenge 2

<Write section summary here. Include ALL the details identified above for suggested remediation and training for ethical challenge 2.>

References