Project 5: Compare / Contrast Two State Government IT Security Policies

Compare and Contrast Overview IT policies are standardized policies that are needed by every organization to ensure the confidentiality availability and integrity of their IT system (Rouse, n.d.). It does not matter if it is the private or public sector, everyone should have an IT policy. When an IT policy is in place, it is a document that applies to all people that access the IT systems. Because each organization is different, IT policies will change from place to place. No IT policy should be the same because each organization has different datasets, different systems in place, and different culture that drive the need for security. IT policies should be a living document due to the everchanging cyber landscape. Many organizations like the International Organization of Standards (ISO) and the National Institute of Standards and Technology (NIST) provide a best practices live