Question

Analyse the security policy cycle for a higher education institute? Highlight the significance of Codes of Ethics in this institute.
[

Answer 1

The very first step to be taken for developing an information security policy for higher education is to work with relevant offices across the institution to identify the laws, regulations and information security drivers which are applicable. And also need to perform a high level gap analysis of each regulatory requirement and driver that is applicable to determine where policy is implemented. Need to develop a systematic action plan that will help to organize the efforts made. Likewise we have to prepare summary document of the impact that the information security policies will have on the institution. And the document should have following guidelines:

(i) Policy description in simple language.

(ii) A proper communication format and the business justification for the policy and also mentioning the downfall for not implementing the policy.

(iii) Need to identify all the affected stakeholders.

(iv) Need to identify regulatory, technical, cultural, and organizational dependencies for the implementation of the policy.

(v) Need to identify milestones and possible barriers of implementation, compliance and enforcement for the policy to run smoothly.

(vi) Need to develop the policy in collaboration with other key stakeholders at your institution.

(vii) Need to Ensure the policy is vetted by impacted subject matter experts and business owners, including information security, legal counsel, human resources, operational staff, and any other applicable steering committees.

(viii) A proper Review of the resources is required to be done along with the standards and regulations that address specific requirements.

(ix) And the final stage is to publish, communicate, train and implement.

The principal consideration for code of ethics and integrity at the Institute of Education (IOE) should be guided by showing a concern for social justice, aiming to make a positive contribution to all stakeholders and the wider research community in the pursuit of excellence in education and related areas of social science and professional practice.