Research Paper> IT-552 Milestone 4_Communication Plan: Southern New Hampshire University IT 552 Comm

downloaded from

Scholarfriends

https://scholarfriends.com Downloaded by: writerforacademic@gmail.com | https://scholarfriends.com/singlePaper/274553/research-paper-it-552-milestone-4communication-plan-southern-new-hampshire-university-it-552-comm Distribution of this document is illegal.

Running head: IT-552 MILESTONE 4

1

Communication Plan Art Penerian Southern New Hampshire University

This study source was downloaded by 100000857952895 from CourseHero.com on 01-08-2023 12:00:16 GMT -06:00

https://www.coursehero.com/file/30721940/IT-552-Milestone-Fourdocx/

IT-552 MILESTONE 4

2 Communication Plan Overview

The security communication plan plays in integral role in the success of keeping an enterprise level network secure. These documents clarify the goals and objective in regard to the area the document covers. [op109]. This document is also being used to facilitate communication between teams and to clarify the role each staff member plays in the implementation of the plan. [op109]. The most important purpose of this document is to ensure effective communication between all stakeholders in regards to Network security and to allow those same stakeholders the ability to offer valuable input in the communication process.[op109].

An effective communication plan enhances the success of an organization by reaching both internal (employees) and external audiences such as third-party organizations that may require access to your internal network.

Messaging Strategy When developing a messaging strategy, it’s important to identify the significant areas of impact the messaging plan will address. These areas of impact include cyber laws, personally identifiable information breaches, cost of security breaches, the advantages of security awareness and how awareness programs will the overall security posture and culture throughout the organization.

The success of MUSA’s awareness campaign will depend on how effective the lines of communication are. Its important that management constantly evaluates the internal communication process and leveraging all that they learned and keeping employees informed about the actions the company will take in the unlikely incidence of disaster. [Bay04].

This study source was downloaded by 100000857952895 from CourseHero.com on 01-08-2023 12:00:16 GMT -06:00

https://www.coursehero.com/file/30721940/IT-552-Milestone-Fourdocx/

IT-552 MILESTONE 4

3

The following list of strategies are considered to be effective methods of raising awareness in regards to security: 

Start form the top – we will begin by crafting a training regiment that engages higher levels of management as E Kelly Hansen the CEO of Neohapsis, Inc, an information security and enterprise product-testing consultancy put it "Without a corporate leader visibly backing the program, people are not going to be as eager to participate.”[Bay04].

This training should ensure upper management is aware of how each employee uses the systems and for what purposes. Management should also be aware of who has access and



why, as well as who needs access and why. [Bay04].

Create alliances – its important for upper management to encourage their IT managers to work with collogue form marketing. Marketing’s responsibility is to make this training into something fun by injecting humor and other elements that will make the training enjoyable to the general populous. The idea is that the IT security group can mine the pertinent data and give it to corporate communications or marketing to bundle it up in a package suitable to distribute throughout the company. This material should be run by a series of groups assembled to review the material and ensure its relevance before it is distributed throughout the entirety of the enterprise. IT managers should take the feed back the focus group provided and make the necessary changes before final distribution.



[Bay04].

Design an in-house training program and communications scheme - as mentioned above its important to involve marketing in the development of these training programs for one simple reason, to sell it to MUSA employees. Marketing should be thinking fun when designing a strategy. The security topics that need to be addressed include Cyber Law and PII breaches and implications. The training should address what it would cost the

This study source was downloaded by 100000857952895 from CourseHero.com on 01-08-2023 12:00:16 GMT -06:00

https://www.coursehero.com/file/30721940/IT-552-Milestone-Fourdocx/

IT-552 MILESTONE 4

4

company should the corporation suffer a data breach and the benefits of awareness programs and how they prevent these breaches. There are many people in organizations all across the world that are scared of security. It can be very intimidating to the average employee when they are requested to speak to security in any capacity. Involving employees in the security process should help alleviate some of the tension of security functions. Marketing should develop a plan to encourage the everyday employee to run their own security scans by developing some sort of interactive game involving security 

scans. [Bay04].

Communications streamlining – e-newsletters distributed weekly are a good way to pass security information and keep employees informed. Facilities will begin installing TV monitors around the facility that will stream network status messages as well as act as an



early warning system should suspected security incidences become a reality.

Transparency – MUSA will be completely transparent when it comes to explain why the rules were put in place. However, reading documentation can be boring. Legal will explore options of updating the written policy. In particular we would like to change the presentation of our written documents. Injecting some humor in the documents will make the task of required reading a little more pleasurable. It is important to remember that this document must be signed by every employee. Nonrepudiation “protects you from frivolous lawsuits, the key to any security initiative is for everyone to be operating from the same page” [Bay04].

Security Culture The best way a company can promote a healthy security culture is by offering frequent collective non-technical training sessions. Frequency better prepares employees for the current security threat trends and offers techniques and procedures to avoid falling victim to them. By

This study source was downloaded by 100000857952895 from CourseHero.com on 01-08-2023 12:00:16 GMT -06:00

https://www.coursehero.com/file/30721940/IT-552-Milestone-Fourdocx/

IT-552 MILESTONE 4

5

socializing the potential for threats throughout the entire company, it reminds employees that cyber security is a shared endeavor. [Con15].

In order to convince the diverse stakeholders in the overall need for a healthy security culture MUSA will adopt the following strategy: I.

MUSA must embrace organizational security from top to bottom. Its important for management not only to fund security awareness but also be seen taking part in it. In a

II.

sense management must practice what they preach.[Hel17] MUSA must clearly define and establish security policy and procedures. Every employee, contractor, manager and board member should have a document that dictates clearly defined policy in regards to acceptable behavior when utilizing company resources.

III.

[Hel17] MUSA will create security training that is fun and engaging for the employees, form the CEO to the Intern. To keep the employees engaged, training materials will be simple, funny and easy to understand. Training sessions will be held on a quarterly basis and in small groups and will introduce contests and other activities that will promote employee

IV.

engagement. [Hel17] MUSA’s IT management team has been reminded to keep it simple. Our security team has been instructed to focus on the basics. They will enforce a complex password policy, patch software and applications on a regular basis, incorporate 2FA (two factor authentication) as an added security layer and monitor and enforce access and least privilege policies.

This study source was downloaded by 100000857952895 from CourseHero.com on 01-08-2023 12:00:16 GMT -06:00

https://www.coursehero.com/file/30721940/IT-552-Milestone-Fourdocx/

IT-552 MILESTONE 4

6

References Bayan, R. (2004, May 6). Success Strategies for Security Awareness. Retrieved from techrepublic.com: https://www.techrepublic.com/article/success-strategies-for-securityawareness/ Contos, B. (2015, August 27). Cyber Security Culture is a Collective Effort. Retrieved from csoonline.com: https://www.csoonline.com/article/2977014/security-awareness/cybersecurity-culture-is-a-collective-effort.html Held, M. (2017, May 15). 6 Tips To Build A Cyber-Security Culture At Work. Retrieved from huffingtonpost.com: https://www.huffingtonpost.ca/matthew-held/cyber-securitywork_b_16578830.html Last Name, F. M. (Year). Article Title. Journal Title, Pages From - To. Last Name, F. M. (Year). Book Title. City Name: Publisher Name.

Top 10 Reasons for Creating a Communications Plan. (2009, January 8). Retrieved from networkforgood.com: https://www.networkforgood.com/nonprofitblog/top-10-reasonscreating-communications-plan/

This study source was downloaded by 100000857952895 from CourseHero.com on 01-08-2023 12:00:16 GMT -06:00

https://www.coursehero.com/file/30721940/IT-552-Milestone-Fourdocx/

IT-552 MILESTONE 4

7

This study source was downloaded by 100000857952895 from CourseHero.com on 01-08-2023 12:00:16 GMT -06:00

https://www.coursehero.com/file/30721940/IT-552-Milestone-Fourdocx/ Powered by TCPDF (www.tcpdf.org)