CYB 410 : 5-2 Project Two Milestone Two: Data Life Cycle Management Policies ...

Data Life Cycle Management Policies

Overview

What is the importance of policies in data life cycle management? In previous modules, you completed a data inventory and data classification for Green Thumb Nursery. Now you will address additional elements in the data life cycle for Green Thumb: data storage, data security, and data destruction. Addressing these elements of the data life cycle is important for all organizations regardless of size or complexity. Creating data storage, data security, and data destruction policies is a proactive step to limit exposure to potential risks to an organization. When writing policies, you should have two goals. First, create the right policy for an organization that is customized to its needs. Second, write a policy that is easy to understand and follow.

Scenario

You are part of a cybersecurity consulting firm that has been hired to help Green Thumb Nursery develop its risk management plan. The initial round of on-site, in-person interviews has already been conducted by your leadership team, and you are tasked with helping the team complete their data storage and security policies and their data destruction policies.

Prompt

To create new policies for Green Thumb Nursery, use the Project Two Milestone Two Templates for the data storage and security policy and for the data destruction policy. These two documents are linked in the What to Submit section below. Reference the Project Two Milestone One data inventory and data classification as needed.

You must address the critical elements listed below.

1. Data Storage and Security Policy
   1. Describe the purpose of the policy using precise and succinct language.
   2. Describe the people and the technology that are covered by the scope of this policy. Be specific.
   3. Create an effective data storage policy that addresses all elements in the policy section of the template.
   4. Create an effective data security policy that addresses all elements in the policy section of the template.
2. Data Destruction Policy
   1. Describe the purpose of the policy using precise and succinct language.
   2. Describe the people and the technology that are covered by the scope of this policy. Be specific.
   3. Create an effective data destruction policy that addresses all elements in the policy section of the template.