Perform research into the specific security needs and resilience goals of a case study organization such as IBM and develop policy with governance, risk, compliance, and assurance elements that align with the organization's strategy.

Instructions

1. Develop a cybersecurity policy and procedures document to facilitate the governance, risk, compliance, and assurance elements required for IBM. When choosing an organization, envision your career options, a specific critical industry of interest, or perhaps choose an organization that you plan on applying for a position.

2. Describe the organization's business model and perspective on resilience as a holistic overview of purpose with specific current and future objectives for promoting resilience using governance, risk, compliance, and assurance.

3. Justify the need for resilience in the organization based on the increasing consumerization of information and the implications for availability, integrity, authentication, confidentiality, and non-repudiation.

4. Provide specific details for how organization resilience will be linked to governance and influence the decision-making process related to people, processes, and systems.

5. Explain how the organization's business model and cybersecurity policy and procedures for compliance and assurance detailed in the document address the responsibilities of all stakeholders.

• Describe the individuals responsible for risk elements in the organization, details of the risk assessment process, and the frequency of assessment with support from best practices and recommendations found in industry.
• Develop an organization governance model that includes dimensions of performance, conformance, and responsibility. Describe the model and provide an annotated chart as an embedded figure to visually communicate the model.

6. Review the academic research regarding the development of an effective governance model that addresses organizational needs in the areas of governance, risk, compliance, and assurance.

7. Form a problem statement that identifies a gap in the literature. Provide references with url.