Create a cybersecurity policy describing the principle, the objective, and policy statement for the law firm’s company network.

Describe the roles and responsibilities by groups (e.g., position director of network security, the network security manager, network security engineers, IT area), defining roles and responsibilities.

Suggest the cybersecurity policy statement, an explanation of the policy statement, and the reasons why the policy statement may be controversial.

Determine the security testing methodology you would use to facilitate the assessment of technical controls.