organization is a regional XYZ Credit Union/Bank that has multiple branches and
locations throughout the region.
banking and use of the Internet are the bank’s strengths, given its limited
customer service department is the organization’s most critical business
organization wants to be in compliance with the Gramm-Leach-Bliley Act (GLBA)
and IT security best practices regarding its employees.
organization wants to monitor and control use of the Internet by implementing
organization wants to eliminate personal use of organization-owned IT assets
organization wants to monitor and control use of the e-mail system by
implementing e-mail security controls.
organization wants to implement this policy for all the IT assets it owns and
to incorporate this policy review into its annual security awareness training.