Violations of Policy Overview: You are the Information Security Officer of Mahtm

Question

Violations of Policy

Overview:

You are the Information Security Officer of Mahtmarg Manufacturing a small manufacturing company worth approximately $5 Million who provides fiber cable to local businesses, individual customers and to government organizations. In the course of the next eight weeks you will be creating your Information Security Plan (Issue-Specific Security Policy in Table 4-3 of the textbook) step by step using this scenario.

Your Task

Step 5: Develop the Violations of Policy section of your ISP

In this week’s Lab you will develop the section on Violations of Policy which describes the penalties for violating policy and provides instructions on how to report policy violations.

Explanation / Answer

The description of various penalties for violating policy is given in below points.

1) We can enforce $100 per violation and that can be increased to $10,000 for the repeat violations.
2) We should categorise the type as well as the level of the violations and on the bases of which strict actions should be taken.
3) If the violations level is high that employee should be fired as soon as possible.
4) If the violation level is low then some amount of money should be deducted from the salary or we can temporary suspend the employee.
5) If the violation leve is low then we can also provide the verbal warning to him regarding policy violation.
6) Written formal notification can also be provided in case of minimal policy violation.

Reporting of policy violation is given in below points:

1) Regarding policy violation you can directly contact to senior members or the HR of the organization and tell him or her about the policy violation.
2) Policy violation can also be reported by sending the formal e-mail to the senior management of the organization taking HR in the cc
3) Policy violation can also be reported on the organization portal.

Related Questions

Navigate

• Browse (All)
• Browse V
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.