$1.$ Apply physical security tools on corporate networks.

$2.$ Identifies risk assessment strategies and provides "real world" application and context for use and implementation of these strategies.

$3.$ Creates a basic security policy and provides supporting examples.

$4.$ Communicate clearly and concisely with all stakeholders.

This plan will consist of $7$ sections:

$1.$ Security Policy Goals.

$2.$ BYOD $($Bring Your Own Device$).$

$3.$ AUP $($Acceptable Use Policy$).$

$4.$ Physical Security $($discuss how to apply physical security tools$).$

$5.$ Password Policy.

$6.$ Privileged User Agreement.

$7.$ Anti$-$Malware Policy.

$8.$ Risk Assessment.

Using bullet statements, provide some basic steps you would take to develop a security policy for patient data in a health care organization.