Regardless of industry, organizations are responsible to protect and secure their customers’ information. Information management is the process of protecting an organization’s data in terms of:
- Classification and handling.
- Privacy.
- Document and records management.
- Sensitive physical information.
To reduce the risk of customer information being jeopardized, organizations often establish a separation of duties to ensure employees only have access to the information they need to do their jobs. Organizations need to abide by several U.S. privacy laws and regulations to be in compliance and to protect consumers.
Requirements
Specifically, you will write a 2-3 page paper in which you:
- Research an organization that has violated U.S. privacy laws and regulations.
- Diagnose how the system failed.
- Examine how the organization rebounded from the violation.
- Recommend measures to prevent the violation from occurring or to reduce the risk.
- Determine key lessons learned.
- Provide citation
The specific course learning outcome associated with this assignment is:
- Research the applicable laws and policies related to cyber defense and describe the major components of each pertaining to the storage and transmission of data.