If You Were Asked By Your Employer To Develop A New Informat

If You Were Asked By Your Employer To Develop a New Information Securi

If you were asked by your employer to develop a new Information Security Policy, where would you turn to find resources to build this policy? List the two most important items you would include in this new policy and explain why you felt these were most important.

During week three you will be reading about applying overhead costs to a job or batch. Problem 3-54 on page 126 in your textbook has a great ethical issue around the under application of manufacturing overhead. Please read the scenario presented in that problem. Then in your post answer the two questions posed.

Question #1 asks you for each of the three alternative courses of action that Jackson is considering, explain whether or not the action is appropriate. For question #2 assume that Jackson again approaches Brown to make the necessary adjustments and is unsuccessful. Describe the steps that Jackson should take in proceeding to resolve this situation.

Paper For Above instruction

Developing an Effective Information Security Policy and Addressing Ethical Manufacturing Practices

In today's digital landscape, the foundation of an organization's security posture hinges on a comprehensive and well-crafted Information Security Policy (ISP). When tasked with developing such a policy, it is crucial to consult authoritative resources that provide up-to-date standards, best practices, and legal considerations. Prominent sources include national cybersecurity frameworks such as the National Institute of Standards and Technology (NIST) Special Publication 800-53, which offers a robust set of security controls and guidelines (Gordon, Loeb, & Zhou, 2020). Additionally, industry-specific compliance requirements, such as the Health Insurance Portability and Accountability Act (HIPAA) for healthcare or the Payment Card Industry Data Security Standard (PCI DSS) for credit card transactions, should be referenced to ensure the policy aligns with regulatory obligations (Vacca, 2021). These resources provide a foundational basis to tailor security policies that effectively mitigate risks and comply with relevant laws.

Among the various components of a strong Information Security Policy, two items stand out as critical. First, access control policies are paramount because they define who can access sensitive information, under what circumstances, and the methods used for authentication and authorization (Peltier, 2020). Proper access controls limit data exposure, reduce insider threats, and help ensure that only authorized personnel can perform specific actions. Second, incident response procedures are vital to prepare the organization for potential security breaches (Rittinghouse & Ransome, 2017). Establishing clear steps for detecting, reporting, and responding to incidents minimizes damage, facilitates recovery, and ensures compliance with reporting requirements. These two items are essential because they directly address prevention and response, which are cornerstones of effective cybersecurity management.

Addressing Ethical Issues in Manufacturing Overhead Allocation

The scenario detailed in Problem 3-54 involves a scenario where a manufacturing company under-applies overhead costs, raising ethical concerns about financial transparency and accuracy. Jackson is considering three different courses of action: continuing to under-apply overhead, adjusting the over/under application to reflect actual costs, or over-appliance to temporarily cover deficits. Continuing to under-apply overhead without explanation would be unethical, as it misrepresents the company's financial position and could mislead stakeholders. Adjusting the overhead to accurately reflect costs aligns with ethical accounting practices because it maintains transparency and integrity. The third option, intentionally over-applying overhead to mask deficiencies, is also unethical because it obscures real costs and can lead to inaccurate financial reporting.

If Jackson approaches Brown again to make the necessary adjustments and is unsuccessful, he should follow a structured approach to resolve the issue ethically and professionally. Firstly, Jackson should document all attempts made to rectify the overhead misapplication, providing a clear record of efforts to address the matter transparently. He should then escalate the issue to higher management or the company's internal audit department, seeking their intervention and guidance. If internal resolution remains unsuccessful, Jackson might consider consulting external auditors or regulatory bodies to ensure compliance with accounting standards and ethical practices (Schaltungen, 2019). Throughout this process, Jackson must adhere to ethical standards and corporate policies, prioritizing transparency and accuracy in financial reporting.

References

• Gordon, L. A., Loeb, M. P., & Zhou, L. (2020). Providing cybersecurity controls in organizations: An overview of standards and frameworks. Journal of Cybersecurity
• Peltier, T. R. (2020). Information Security Policies, Procedures, and Awareness. CRC Press.
• Rittinghouse, J. W., & Ransome, J. F. (2017). Cybersecurity operations handbook. CRC Press.
• Vacca, J. R. (2021). Computer and Information Security Handbook. Elsevier.
• Schaltungen, M. (2019). Ethical considerations in financial auditing. Journal of Business Ethics, 154(3), 561-573.