IT 335 Milestone 5.docx IT 335: Wilburs Widgets Security Policy Gap Analysis Southern

IT 335 Milestone 5.docx  IT 335:   Wilbur™s Widgets Security Policy Gap Analysis  Southern New Hampshire University  Data Security Policy  DATA SECURITY POLICY  1. PURPOSE  Wilbur™s Widgets must protect restricted, confidential, or sensitive data from loss to avoid reputation damage and to avoid adversely impacting our customers. The protection of data in scope is a critical business requirement, yet flexibility to access data and work effectively is also critical.  It is not anticipated that this technology control can effectively deal with the malicious theft scenario, or that it will reliably detect all data.  Its primary objective is user awareness and to avoid accidental loss scenarios. This policy outlines the requirements for data leakage prevention, a focus for the policy and a rationale.  As defined by numerous compliance standards and industry best practice, full disk encryption is required to protect against exposure in the event of loss of an asset. This policy defines requirements for full disk encryption protection as a control and associated processes.  2. BACKGROUND  The objective of this Data Security Policy is to protect Wilbur™s Widgets' employees, partners, and the company from the preventable loss or compromise of company or customer information.  Data loss prevention is designed to make users aware of data they are transferring which may be sensitive or restricted in nature.  Full disk encryption is now a key privacy enhancing technology which is mandated my many regulatory guid