Universities and other educational institutions are subject to a variety of legal requirements including FERPA and HIPAA, among others. Read the article linked below, the SANS Institute security policies, and other Internet sources on university data breaches and on policies, including the samples available through the link provided above under Readings and Research of the ISO/IEC 27001 support site. Ramakrishna Ayyagari and Jonathan Tyks (2012), "Disaster at a University: A Case Study in Information Security," Journal of Information Technology Education: Innovations in Practice (Volume 11). Retrieved from http://www.jite.org/documents/Vol11/JITEv11IIPp085-096Ayyagari1035.pdf SANS Institute, Information Security Policy Templates. Retrieved from http://www.sans.org/security-resources/policiesTask Description Choose one of the policy and procedure areas identified as deficient in the case study and draft a security policy to mitigate the vulnerability. Also include provisions for user training, enforcement, and disciplinary activities. Deliverable Your Security Policy should be written following APA guidelines, ***4-5*** pages using 12-point font, and including title, executive summary, and reference pages. Please include 4 references. Include an update table and a sign-off area. Submit your Security Policy to the Dropbox titled for this activity by the date specified by your instructor.

For this assignment, you will create a PowerPoint presentation discussing site strategies. A site refers to the organization using a separate physical location to set up operations in the event the original location is compromised (e.g., the main headquarters lost power due to a storm). Sites are considered exclusive or shared. Exclusive means that the organization controls the site which can be configured as hot, warm, cold, or mobile. Shared means that the organization is sharing the site for a moment in time, purchasing a service, or has an agreement with another organization to share resources. Your presentation will be 10–15 slides with 1 slide for the title and 1 slide for references, leaving 7–13 slides in which you will discuss exclusive and shared sites and the purpose for which they are used. Each slide will have, at a minimum, a 100-word narrative in the Notes section of the slide.Create an incident response plan that provides how an organization will react to a threat or hazard. It is important to note that incident response can take other names, such as emergency response. This section would contain the personnel identified to support the appropriate response to a given incident and what they are supposed to do. Obviously, this can be very detailed in scope because you must address a response for different types of incidents. For example, a response for a cyber threat would be different from a response to a tornado. This being said, for this assignment, you will address incident response from an information technology (IT) perspective.