IT 335 Module 6 Short Paper.docx Running head: SHORT PAPER CONSIDERATION OF POLICY IMP

IT 335 Module 6 Short Paper.docx  Running head: SHORT PAPER “ CONSIDERATION  OF POLICY IMPLEMENTATION  IT 335:   Short Paper “ Consideration of Policy Implementation  Southern New Hampshire University  When comparing the Wilbur™s Widgets network diagram to the seven domains of IT infrastructure, coupled with what is known already about the company, there are several things that stand out as potential risks.  First, the user security awareness is very low.  Second, the technology implementations are grossly out of date.  Finally, the network architecture is not configured to industry standard specifications. This paper will address some of these concerns.  œThe weakest link in any security plan or implementation is a human. The weak links include everyone from the hourly paid end user to the owner of the company.  (Thomason,  2013). The employees have almost no concept of even basic information security practices. They routinely keep sensitive information on their desk and fail to lock their computers when they step away from them. The best way to mitigate this risk would be to have a comprehensive user awareness training. This training needs to be conducted during the hiring process with refresher training held at regular intervals. The recommendation would be to start with every six months until employees have a firm grasp of information security concepts and practices, then move to once yearly. This will allow the employees to become familiar with the current threats that are out there, as well as some ways