Discussion 5

Choose one of the policy implementation documents from this week’s readings (a) DHS Risk Management Fundamentals OR (b) DoD Cybersecurity Culture and Compliance Initiative.

Using your selected policy implementation document (DHS or DoD), prepare a two page briefing paper (5 to 7 paragraphs) for the senior leadership and corporate board of the case study “company.” (Use the case study and provide specific information about “the company” as appropriate for your briefing).

In your briefing paper, you should address how this type of policy implementation document can be used to support implementation of specific risk management strategies.

• For the DHS document, you should focus on the use of training and doctrine (establishing a specific business process) as a risk management strategy. Discuss the pro’s and con’s of using a single risk management process across all corporate operations. Make sure to explain the risk management process you choose.

• For the DoD document, you should focus on the use of “culture shift” as a risk management strategy. Discuss the pro’s and con’s of using “culture shift” and “individual responsibility / accountability” as a risk management strategy.