Project 5 Compare & Contrast Two State Government IT Security Policies.

Compare and Contrast Overview IT policies are standardized policies that are needed by every organization to ensure the confidentiality availability and integrity of their IT system (Rouse, n.d.). It does not matter if it is the private or public sector, everyone should have an IT policy. When an IT policy is in place, it is a document that applies to all people that access the IT systems. Because each organization is different, IT policies will change from place to place. No IT policy should be the same because each organization has different datasets, different systems in place, and different culture that drive the need for security. IT policies should be a living document due to the everchanging cyber landscape. Many organizations like the International Organization of Standards (ISO) and the National Institute of Standards and Technology (NIST) provide a best practices live document that are great guidelines to model any security policy from (Palo Alto Networks, n.d.). When it comes to government policies, they vary from state to state. What works for one state may not work for another state. Some states are a lot smaller and require less maintenance and overall resources so the policy may be smaller than that of a large state or city. Large states may collect more data due to a larger population and that will require more resources to function properly. No matter what the size of the state, IT policy is one of the most important documents that a state can have and it is required for the proper security of the states IT systems and