Discussion paper on Security Awareness Policy

 
For this assignment, you will write a research report on Security Awareness Policy (SAP), also called Security Awareness and Training. Research best practices, find another company’s policy for this area, and find a generic template for security awareness online.Based on this research, determine the types of policies needed for the type of organization outlined below.
Write your report on how they would identify the required types of policies for their organization. Structure your report by starting with an introduction explaining what the organization must consider, including who, what, when, and why. Place the most important policies in a table to display and explain them, and then conclude with a rationale for why your selection of necessary items need to be part of the policy for this type of organization. Include References for your research in APA style. Your report should be around 3 pages in length.
Scenario:

You work for a large bank or credit union.
This bank has multiple locations and uses a remote access server.
Online banking and the customer service department are critical business functions.
The organization needs to be compliant with the Gramm-Leach-BlileyAct.
The organization wants to monitory and control internet usage, the email system, and eliminate personal use of organization-owned IT assets and systems.