IT 335 Module 4 Short Paper.docx Running head: SHORT PAPER CONSIDERATION OF POLICY IMP

IT 335 Module 4 Short Paper.docx  Running head: SHORT PAPER “ CONSIDERATION  OF POLICY IMPLEMENTATION  IT 335:   Short Paper “ Consideration of Policy Implementation  Southern New Hampshire University  Kotter™s Eight-Step Change Model will be used to implement the policy changes at Wilbur™s Widgets. This model focuses on implementing changes from the top down.  Gaining buy in from the CEO and Board of Directors will be important to the successful implementation of the new policies.  Step 1: Create Urgency  It is essential for the information security team to be able to effectively communicate the risk that the policy is intended to address to the CEO and Board of Directors.  Getting their buy in from the beginning will help in the development of the policies and to change the overall culture of the organization regarding information security.  Step 2: Create a Powerful Coalition  In this step, key stake holders throughout the organization are polled on the policy change. The policy will be explained, and concerns will be listened to.  By soliciting feedback from throughout the organization, the policies will be developed in a way that makes sense for the organization. This will also help with getting the employees to buy in to the new policies. Step 3: Create a Vision for Change  The information security team will, œAfter compiling everyone™s input, create a coherent security message and policy. (Johnson, 2014). This message should explain the policy and help to sell the team™s vision. A clear vision for the