Job Aid 2

Table of Contents
Worksheet 1 1
Worksheet 2 1
Worksheet 3 2
Job Aid 2 1
Worksheet 1
Reasons why security policies fail
Complete this table. Be prepared to discuss your answers with the class.
Reasons
Does this reason
apply?
Not enforced. Employees tend to disregard security policies if the policies are
not enforced and violators go unpunished.
ifficult to read. !ecurity policies often contain legal or technical "argon that
makes them difficult for employees to understand.
ifficult to find. !ecurity policies that are stored in obscure or inaccessible
locations prevent many employees from follo#ing them.
$utdated. !ecurity policies that are not kept up to date %uickly become
obsolete #hen technologies and business processes change.
&oo vague. !ecurity policies that are open to interpretation by employees
often result in inconsistent deployment of security in an organi'ation.
&oo strict. !ecurity policies that are too strict in their enforcement or their
effect on business processes are generally not taken seriously by employees
or enforced by management.
Not supported by management. (f management does not follo# security
policies or support their implementation) employees typically do not follo#
them either.
Worksheet 2
Steps to ensure success in the future
Complete the reason and example columns. Be prepared to discuss your answers with the
class.
Guidelines Reason !a"ple
*lear and concise policies
!imple procedures
2 Job Aid 2
Guidelines Reason !a"ple
+anagement support
Ease of finding and use
,usiness continuity
Enforcement through technology
*onse%uences
(ncentives
Worksheet #
$dentifyin% appropriate tea" "e"bers
Complete the tables. Be prepared to discuss your answers with the class.
Core tea" role Tea" "e"ber
Job Aid 2 #
Core tea" role Tea" "e"ber
!tended tea" role Tea" "e"ber