Describe the critical actions of management during a major incident or a disaster.

PART A No sources needed Number question at least 50 words per question 1. Assess the main policy elements governing data classification and data handling in organizations to ensure that data remain protected at rest and in transit. Describe the methods that organizations can implement to ensure that data remains protected at rest and in transit. Determine which areas of the data life cycle are the most challenging to control and explain why (i.e., creation, access, use, transmission, storage, physical transport, and destruction). 2.Identify the risks related to information systems and suggest ways to minimize them. Describe Quality Assurance and Quality Control. Discuss their roles in information systems. 3. Imagine that you are part of an organization that has recently formed an incident response team (IRT). You need to draft an initial address to the team members. Respond with your initial address to the team members overviewing the elements of the incident response team charter and the potential challenges that an IRT could encounter. Determine the actions of the incident response team that are the most critical in the event of a major incident or disaster. 4. In addition to the incident response team, every member of an organization has a role to play during an incident to mitigate the impact of an incident. Describe the critical actions of all employees during a major incident or a disaster. Describe the critical actions of management during a major incident or a disaster. 5. Examine the implementation issues for IT security policy development. Determine which of these issues are the most challenging for organizations to overcome and explain why. Propose at least three control measures that organizations can implement to mitigate the potential issues associated policy development and implementation. 6. Develop a list of the key elements that need to be included in a security awareness program. Analyze how security awareness programs differ from security training programs. Examine at least four common hindrances to organizations developing effective security awareness programs and security training programs. Propose solutions to these hindrances. 7. Based on the DiSC profile you took in your first course, what questions do you think your boss should ask to understand what motivates you? If you don’t remember the results of your DiSC assessment from Course 1, choose one of the DiSC types that you think most closely represents you and explain what questions you think your boss should ask to understand what motivates you. It is uploaded PART B-Use at least three (3) quality resources in this assignment. Note: Wikipedia and similar Websites do not qualify as quality resources and 3 pages Assignment 2: Business Impact Analysis Due Week 8 and worth 100 points In order for an organization to develop an effective business continuity plan or disaster recovery plan, it must know what information assets it has, their impact on business operations, and the criticality and priorities associated with the information systems and assets. The primary objective of a business impact analysis (BIA) is to identify the assets that are required for continued business operations in the event of an incident or disaster. Thus, a critical step in the development of an effective BIA includes establishing component priorities and determining component reliance and dependencies. Additionally, organizational personnel must know their responsibilities during recovery efforts. Write a three to five 3 page paper in which you: 1. Describe the methods for establishing component priorities, including: a. Business functions and processes b. BIA scenarios and components c. Financial and service impact of components not being available d. Recovery time frameworks 2. Describe the methods for determining component reliance and dependencies, including: a. Component dependencies b. Resources required to recover component in the event of failure c. Human assets needed to recover components 3. Provide recommendations for the development of the BIA, management and other personnel responsibilities, and educating company personnel that would be involved in the recovery efforts. PART C This assignment has 2 parts.