Learn About creating good password security. An IT Security consultant has made three primary recommendations regarding passwords: Prohibit guessable passwords such as common names, real words, numbers only require special characters and a mix of caps, lower case and numbers in passwords Reauthenticate before changing passwords user must enter old pw before creating new one Make authenticators unforgeable  do not allow email or user ID as password Using WORD, write a brief paper of 200-300 words explaining each of these security recommendations.  Do you agree or disagree with these recommendations. Would you change, add or delete any of these?  Add additional criteria as you see necesarry.

Universities and other educational institutions are subject to a variety of legal requirements including FERPA and HIPAA, among others. Read the article linked below, the SANS Institute security policies, and other Internet sources on university data breaches and on policies, including the samples available through the link provided above under Readings and Research of the ISO/IEC 27001 support site. Ramakrishna Ayyagari and Jonathan Tyks (2012), "Disaster at a University: A Case Study in Information Security," Journal of Information Technology Education: Innovations in Practice (Volume 11). Retrieved from http://www.jite.org/documents/Vol11/JITEv11IIPp085-096Ayyagari1035.pdf SANS Institute, Information Security Policy Templates. Retrieved from http://www.sans.org/security-resources/policiesTask Description Choose one of the policy and procedure areas identified as deficient in the case study and draft a security policy to mitigate the vulnerability. Also include provisions for user training, enforcement, and disciplinary activities. Deliverable Your Security Policy should be written following APA guidelines, ***4-5*** pages using 12-point font, and including title, executive summary, and reference pages. Please include 4 references. Include an update table and a sign-off area. Submit your Security Policy to the Dropbox titled for this activity by the date specified by your instructor.

Chapter 9 questions, must be finished by this Firday(April 3) , others finished before April 16.