this assignment should address the following outcomes- be able to develop, evaluate and implement an e-commerce strategy for an organisation. ict security policy document: prepare the security policy document for ict use in an organisation you are familiar with. this might take the form of a stand-alone policy document, or the security chapter of a larger ict policy document. you should locate the existing ict security policy documents, critically evaluate them in the light of their security threats and vulnerabilities and identify best practice for inclusion in your document. use harvard format to cite your sources. you should also undertake a security risk analysis of your organisation. this will identify the various threats and threat agents, the organisation’s security vulnerabilities, and the impact of potential security breaches. you should prioritise these risks, and devise a set of precautions and safeguards. note: you are permitted a little artistic licence here, since few – if any –organisations will permit you to submit results of an official risk analysis. you should identify the main likely risks from a literature search. using what you learned from evaluating existing policy documents, you should assemble appropriate precautions and safeguards into a security policy document. you should separately explain clearly how this policy document satisfies the risks you found, and how it draws on the best practice identified in your evaluation of existing policies. base the security policy document on an analysis of your organisation’s security risks, and on a critical evaluation of other policy documents (you do not have to submit a copy of these, only an evaluation of them). berr and becta papers on ict policy documents may also be useful: - - However be aware that your document must be tailored to your case study, and in particular to the policy’s audience. Deliverables: Cover page (first page of coursework description) --------------------------------------- 1 page Description of organisation -------------------------------------------------------------------- 1 page A systematic description given that provides clear and succinct information to verify the security risk analysis. Critical evaluation of existing ICT security policy documents ------------------------ 5 pages Several relevant and well chosen ICT security policy documents reviewed. A comprehensive and balanced critical evaluation provided. Evidence of significant research that generates relevant best practice in a particularly clear and/or original way. ICT security risk analysis --------------------------------------------------------------------- 3 pages A comprehensive and clear risk analysis, based on supporting literature. Precautions and safeguards clearly minimise risks (threats, vulnerabilities and impacts). ICT security policy document --------------------------------------------------------------- 5 pages A succinct yet comprehensive policy document. Clear evidence that it addresses risks identified, perhaps in an original or insightful way. Appropriate best practice included. Writing style particularly well tailored to intended audience. Narrative explaining how policy document is based on evaluation and analysis -- 3 pages Clearly and comprehensively explains how the policy document was devised. Provides insightful or original reflections on the problems and solutions. Well-formatted structure to report, Very clear sentences that make good use of punctuation. Writing style clear and informative without being Verbose. Evidence of reading books relevant academic journals and books. Quotations used appropriately and sparingly. All sources cited and referenced in Harvard format. Hints for getting better grades: 1) Try to identify an original theme for your report. Use this to unite the various parts of the report in a coherent way. 2) You will probably learn more if you evaluate at least one really poor policy and at least one really good policy. 3) Your policy document must be tailored to your case study. 4) In general, the ability to make your point briefly and clearly is a skill that will be rewarded; if your report is over-long or wordy or repetitive you are likely to lose marks. 5) Large parts of your report will be your evaluation, so it’s fine to write it using the first person singular. Paraphrase your own words. As far as possible, don’t copy and paste material verbatim from existing sources. Whether you are quoting verbatim or paraphrasing, cite and reference your sources using the Harvard System.