Lesson 6 Assignment – Dictate a Procedural Plan to Facilitate Governance, Policy, Risk, and Compliance

Introduction
This week you learned about the influence of policy and assurances on the strategic planning of the organization. This assignment is designed to support your application of that knowledge. Specifically, you will develop a procedural plan to facilitate governance, risk, and compliance in alignment with the strategic plan of the case study organization.

Instructions

You have been asked to develop a procedural plan to facilitate the governance, policy, risk, compliance, and assurance elements required for the organization you chose in Lesson 1.

Write a plan that includes the following information:

• Provide a holistic model of risk management that will be used to account for factors associated with the technological infrastructure (internal and external) of the organization.
  
  

• Select a cybersecurity management model (NIST, ISO 27000, C2M2, CMMC, DFARS, ISO/IEC 21827) that encompasses the necessary elements to align governance, risk, and compliance in alignment with the strategic plan.
  
  

• Describe specifically how the organization’s business strategy is supported by the procedural plan elements of governance, policy, risk, compliance, and assurance. In addition, explain the plan for the areas of accountability and responsibility of the organization as this relates to protecting critical information resources from current and future loss.
  
  

• Discuss the maturity level of the cybersecurity program, specifically in the areas of processes, tools, roles, and responsibilities of key personnel that are part of the plan.
  
  

• Describe the role of executive leadership in achieving buy-in from the organizational stakeholders in the achievement of governance, risk, and compliance (GRC) elements of the strategic plan.
  
  

• Explain the significance of the critical role the board of directors has in influencing the formation of security strategy and policy, including the commitment to and support of a specific cybersecurity posture that aligns with the strategic plan of the organization.

• Review the academic research regarding the influence of policy and assurances on the strategic planning and business model of the organization. Write a problem statement that identifies a gap in the literature.
  
  

Length: 8 page paper, not including title and references pages.

PLEASE SEE THE ATTACHED PAPER AS A GUIDE