Management of policy

 

 

 

It is strongly recommended you read this entire assignment before you begin working on t and revisit the assignment periodically as you work on it.
M01 – Policy Review
The CHI organization and its executive team desire to reorganize and implement more effective management of policy and also to review and update some parts of the policy environment of the company.
Your assignment is to organize the existing library of policy documents and then undertake a CHI, Inc. policy and governance review. Follow these detailed, multi-step instructions to complete each of the multiple parts of the assignment.
Step 1:
Locate the CHI Policy document set you have been given. Using a text editor of your choice, prepare a separate document file for each of the various policy elements. Each policy must be in a separate and properly named file. This will include isolating the EISP as its own file as well as placing each of the existing ISSP policy texts into separate named policies, each in its own document file, to make future revisions more efficient.
Create a folder on your KSU provided OneDrive account and Name it “<your netid> ISA 4820 Policy” replacing <your netd> with your KSU netid.
You must explicitly share this folder inside OneDrive with the course instructor ([email protected])
Inside of that shared folder create a subfolder with the name “M01 Existing Policy”.
Using any tools of your own choosing, create a set of policy documents in this library extracted from the currently published single policy document in the course’s case study. Be sure to make each policy document clearly named. Each policy document must be edited to be attractive in appearance. Add such headers and footers as you think are needed based on your knowledge of policy management practices. Each document must be saved as a PDF file type.
You should have one complete EISP document in a single PDF file. You will have a single PDF file for each ISSP and SySSP that you find.
Name your EISP and ISSP files using this convention: “CHI – <your netid> – <EISP or ISSP> – <policy name> – Ver. <version code>”.
For example “CHI – nynam888 – ISSP – Network Firewall Usage Policy – Ver. 1.0” or
“CHI – mynam88 – EISP – Corporate Information Security Policy – Ver. 2.1”. Assign version numbers as you find appropriate.
Create a single PDF file that serves as a root policy document (this is intended to serve as an index or landing page) which will identify the nature of your repository and also serve as a launching point to access each and every one of your separate policy documents. This document should link to the detailed policy documents.
The appearance of the documents and your navigation elements, as well as the functionality of the links, are a factor of your assessed performance.
When you have completed this process, verify the course instructor has access. Now create an additional PDF file for submission with the link to your root policy document (which should be residing on your folder in OneDrive). Save this active link as a PDF document. Submit this as assignment “(M01A) Policy Directory Setup” to indicate you are done with this step. The instructor will navigate using this link to reach your landing page (index of policy files).
GRADING NOTE: When I grade your assignment I will:
• Open the PDF file you submit to D2L
• I will look for a link that should take me to a single file (the landing page) on your OneDrive
• I will link and load it — I prefer that it be a PDF but it could be HTML or MS Word
• Once that file is open I will look for and then link to the EISP document — the link must work and open a complete and correct EISP preferably in PDF

• I will return to the landing page and choose three ISSP or SYSSP documents at random — Each of them should link and open, again preferably as a PDF file type and reveal the proper policy statement
• Then, I will look at your list of policies on the landing page to make sure that it is complete
• I will close the landing page and all of the policy documents
• Finally, I will open your OneDrive folder directly via OneDrive and verify our file naming convention was done to specification.
Step 2:
For the second step, you are asked to make a strategic recommendation to the Board of Directors about how the CHI cybersecurity function should be organized. To accomplish this, please be sure you are familiar with the Case Study and have read and assimilated the entire CHI Draft Policy Manual that has been provided. Prepare the components of your recommendation and then combine them into a single PDF file to be submitted for review.
Start by writing a report of at least 200 words that will:
• Identify any inconsistencies you can find in the roles described in the Case Study and those implied in the Policy Manual.
• Propose an overview and explanation of a new set of roles and organizational structures and also provide a replacement for the entire section of the case titled “Officers and Key Employees” that is complete and consistent and able, in your opinion, to meet the needs of the company. You may make any assumptions and revisions you see fit that are consistent with the balance of the case study and the Policy Manual. This preparation should be the basis for the report that follows.
• Now use your overview and explanation from above to prepare your report so that it has:
o a one-line title,
o an abstract/summary not longer than one page,
o a statement of the scope of your report that includes your sources and assumptions,
o a section on inconsistencies,
o a section on proposed changes and
o a final section that provides a complete replacement for the entire section of the case study that is titled “Officers and Key Employees”.
• Prepare a cover memorandum of transmittal. Place it as the first page of the submission. This memorandum should identify what is being transmitted, and frame the context of the report. There must be a hard page break between the memorandum and the report.
• The combined document must be submitted as a PDF file type and as the assignment “(M01B) Proposed Organization”. Your combined document must be a PDF file where the first page is the cover memorandum with your report starting on the next page.
Step 3:
The CIO of CHI, Inc. has become concerned that the current networking environment may not be as secure as it was perceived to have been. To that end, you have been commissioned to undertake a review of the current policy environment and to make specific recommendations for improvements to the policy of the firm as regards the firewall and VPN control systems.
• Undertake a complete policy review of the CHI, Inc. policy suite to summarize the current policy regarding firewalls and VPNs. Save your review as it will be the basis for a report you will assemble. This review must include:
o Review current CHI policy to identify all EISP-level policy provisions that touch on the network firewall and VPN subject area
o Write a complete review of the current network and VPN policy in place now
o Write a critique of the current network and VPN policy in place now
o Your review and your critique must identify and comment on all policy provisions that touch on the network firewall and VPN subject area
• Write a short memorandum. Address the memorandum to the CIO of CHI. In this memorandum, cover
o The current state of the VPN connectivity available at CHI
o Assessment of how important VPN connectivity is to the future of CHI
o Include one paragraph to articulate your current level of technical ability (actual not simulated) in designing, installing, configuring, and using VPN technology.
o Submit the memorandum for assessment as a PDF file using assignment “(M01C) Policy Memorandum”
• Now, use your policy review prepared above to create a plan to revise the policy environment to fit current needs regarding the firewall and VPN technical realities and anticipated needs. The plan will:
o Assume that one new ISSP-level policy document will be created to enable the design and deployment of a coherent firewall and VPN solution
o Describe all changes needed in the EISP-level document (you need not re-write the EISP, just identify what needs to be rewritten)
o Identify any ISSP-level documents that should be rescinded and that will be replaced by the new ISSP.
o Completely describe all changes needed for all of the remaining ISSP-level documents (you need not re-write any of the ISSPs, just identify what needs to be changed)
o Fully plan the new ISSP – This plan will include writing the complete ISSP introduction and then writing a fully descriptive and annotated outline for the rest of the new ISSP.
o Consolidate your InfoSec policy review analysis and improvement plan into a single coherent, complete business report and submit it for assessment as a PDF file using assignment “(M01D) Policy Review Report”. Be sure to clearly label each part of the submission so that the reader will be able to find the components listed above. Be sure that the first page is a memorandum to the CIO of CHI that describes what is in the report to serve as a transmittal cover sheet. Be sure there is a hard page break between the memorandum and the report.
• Your final requirement for this assignment is to update selected elements of the CHI policy environment as noted here:
o Duplicate (make a copy with a new name) your OneDrive policy folder created earlier and name it “M01 Proposed Policy”. Please leave the folder from the prior exercise in place for reference.
o Verify that the course instructor has sufficient access to view your new folder. If not, make the proper adjustment.
o Write one new ISSP-level policy document as you specified in your submitted plan. Be sure the ISSP has all the required elements.
o Update the EISP-level document as you specified in your submitted plan. As needed, upgrade its appearance to be professional and attractive.
o Remove all ISSP-level documents that should be rescinded as you specified in your submitted plan.
o Correct any file type or file naming conventions that remain so that your work will meet all of the requirements from Step 1.
o Update all ISSP documents that remain active to have a professional appearance.
o Update and upgrade the appearance of your policy index/landing page to make it attractive and professional looking. The appearance of the documents and your navigation elements are a factor of your assessed performance.
o Prepare a memorandum that includes an active link to your new policy folder index/landing page. This must be submitted as a PDF document.
o Submit the PDF document as assignment “(M01E) Policy Updates” to indicate you are done with this step.
• You will have to complete the policy skills self-assessment (M01F). See the separate specification for that.

 

 

 

Sample Solution

Since the presentation of the 1990 NHS and Community Care Act it is never again a possibility for human administrations and open area associations to work in seclusion. Convenient (1997,p.18) has contended against the presentation of market standards into territories that are by and large viewed as the duty of the state welfare framework, since this could hurt the individuals who most required the assistance. This converging of human administrations with open part associations has implied that an expanding number of human administration laborers are utilized in the private segment. Human Service associations are contained medicinal staff and others, for example, executives, cooks and cleaners utilized by the NHS or in private practice, the police and probation benefits, the jail administrations, social administrations, and to a constrained degree those working in training. This task will take a gander at a portion of the impacts of current arrangements on the hierarchical structures of wellbeing/social consideration and accomplice associations. There will be an assessment of issues of intensity and imbalance in associations and an investigation of the thought of organization working. The accomplishment of such approaches will be investigated through the encounters of individuals with emotional well-being issues. Association working is most particularly important to individuals with psychological well-being issues and the Government has guaranteed more prominent focus on this in the White Paper that turned out this year, Our Health, Our Care, Our Say.[1] Associations Social administrations and Health Care are what as known as human administration associations, in other words they are there to help individuals out of luck.. Individuals working in social administrations by and large do so on the grounds that they are spurred by a craving to see that individuals get the sort of assistance that they need in the midst of emergency. Human Services work in the general population and the private area. Which ever territory an individual picks they are bound to look for some kind of employment in the human administrations on the off chance that they have had some related knowledge either work positions or some other intentional job. In social work earlier network contribution is viewed as a benefit. Most social specialists work in the open area. Social Services used to be known as close to home social administrations since social specialists are frequently worried about people and the consideration they may require. Social work is both run of the mill, and untypical, of the human administrations as a rule, initially its point is only that, giving an administration that advantages other individuals, in the second example social laborers are bound to be associated with individuals on an individual premise and regularly for a delayed timeframe. This last isn’t generally the situation in different territories of the human administrations (Postle et al, 2002). A social laborer who works in emotional wellness may wind up appended to a clinic just as to social administrations. This implies between office working which is winding up progressively basic in the human administrations particularly as the authoritative and strategy prerequisites of the1990 Care in the Community Act have progressively centered around wellbeing and social consideration offices working cooperatively with administration clients. This is progressively regular since the Government order ofJuly of last year.[2] Parliament chooses what social work comprises of. This is on the grounds that the Government characterizes the rules that framework social laborers duties. This incorporates the individuals that social specialists have a duty towards, the way wherein such obligations ought to be embraced, and the authoritative structure that supports the expert routine with regards to social work (Brayne and Martin, 1995). Social laborers need to maintain the code of routine with regards to the General Social Care Council and are bound by the 1970 Social Services Act as it applies to nearby specialists. Since 1998 social specialists are bound by law to regard the inalienable rights and poise of each human individual. Social laborers additionally must be comfortable with the 1990 Community Care Act and resulting enactment. Neighborhood Authorities are bound by the Disability Discrimination Act and a social specialist working with individuals with psychological wellness troubles would likewise need to know the provisions of this Act and the Chronically Sick and Disabled Persons Act of 1970. These educate social laborers’ choices. These may include characterizing psychological well-being challenges and in what ways their needs may best be tended to. This is especially so for Approved Social Workers. The social specialist has an obligation to play out an appraisal of requirement for anybody in the neighborhood is characterized as having a handicap, including emotional wellness troubles, regardless of whether the or not the individual demands an administration. Progressing preparing and advancement for expert social laborers is a prerequisite of the activity. On the off chance that you work in handicaps, especially emotional well-being then some social laborers may represent considerable authority in psychological well-being and work towards turning into an Approved Social Worker. Social laborers work inside a system that is educated by human rights and social equity and they should know when the code of training inside which they complete their obligations, is in opposition to the qualities basic this structure. Inside social work it is commonly acknowledged that all individuals are of worth and are qualified for be dealt with fairly and accommodatingly. Social specialists who manage clients who have psychological wellness issues presently need to work intimately with the NHS and with Voluntary Organizations, for example, Mind. Organization Working The Griffiths Report (1988) which was appointed by the Government suggested that neighborhood specialists ought to be ’empowering agents’, who sorted out and coordinated network care. Nearby specialists would never again be the sole suppliers of consideration, however would have their own spending limits to buy care from the private and willful part. This progressed toward becoming law under the 1990 Act the terms of which brought about an expansion in the weight of consideration for the social work calling. The Act accentuated organization working in all territories and social laborers presently need to counsel with experts from varying backgrounds so as to sufficiently accommodate their customers needs. The presentation of new working practices and the need for a more prominent level of between expert working has implied that the self-governance that social laborers once appreciated has been progressively disintegrated (Challis, 1991). Molyneux’s (2001)[3] investigation into fruitful between expert working built up three zones that added to the achievement of such associations. Staff should have been completely dedicated to what they were doing and individual characteristics of versatility, adaptability and a readiness to impart to others were high on the motivation. Normal and positive correspondence between experts was viewed as endemic to great working connections and administration conveyance. This correspondence was improved (in the examination) by the affectation of week after week case gatherings which enabled experts to share learning and encounters (2001, p.3). Convenient (1993) has contended that so as to work effectively together associations need to discover ideal or win/win arrangements instead of have their exchanges end in inefficient clash. A noteworthy issue with between expert working in associations is that the two sides can end up cautious of their positions (See Handy, 1993 ch.12). This is especially the situation when individuals are approached to accomplish something that conflicts with their expert morals and convictions (see ch.15). In this manner a social laborer would not be content with arrangements that didn’t, in their view, serve to enable customers with psychological well-being challenges. The consideration and strengthening of this customer gathering is a focal element of the 2006 White Paper which guarantees continuous consideration for those with psychological well-being troubles as well as for their carers as well.[4] These contentions are supported by Laidler (1991) on the grounds that so as to be effective crosswise over expert limits individuals should be certain of their own proficient job so as to have the option to step outside their expert independence and work effectively with others. It helps in between expert working if all individuals from the group are especially centered around the necessities of the administration client. Thusly individuals reach ‘proficient adulthood’. As indicated by Norman (1999) psychological wellness experts working inside groups were hesitant to obey choices taken by others since it undermined their very own proficient judgment. It doesn’t improve the situation when the Government focuses on the requirement for between expert working and afterward sets separate execution targets, as opposed to coordinated gathering ones. Hudson (2001) keeps up that since government has been worried to organize decision and present challenge in open administrations this has left experts with sentiment of frailty and an absence of confidence in authoritative foundation. It would be a pitiless incongruity if, having accomplished the sacred goal of neighborhood coordinated working, the administration, with Sedgefield’s nearby MP at its head, presently sets up measures that outcome in its disassembling (Hudson 2005 no page number).[5] Simultaneously Government anticipates that social consideration and wellbeing experts should work intently and cooperatively with administration clients. In social administrations there is very much an emphais on urging the client to take part in choices with respect to their consideration. In the NHS in any case, numerous experts still work with the possibility that the patient does as the expert lets them know. This makes it hard for social specialists who are urged to reduce the power differential among themselves and administration clients, this implies participating in hostile to harsh practice for example available language, and doing what they can to enable people. Social Services and Mind Psyche is a philanthropy that works for those with emotional wellness issues. The philanthropy focuses to the way that the correct sort of social consideration can go far to easing the pressure that emotional well-being troubles may bring, and which are frequently disregarded. As of not long ago psychological well-being clients gotten just a modest quantity of social consideration

This question has been answered.

Get Answer
WeCreativez WhatsApp Support
Our customer support team is here to answer your questions. Ask us anything!
👋 Hi, Welcome to Compliant Papers.