About this Assignment Cybersecurity refers to the protection of sensitive information, specifically that which is stored or accessed via the Internet. An information security policy is a way for an organization to define how this information is protected and what the consequences are for violating these rules. For this final assignment, you will write a 1,200-1,800 word paper outlining a security policy and plan for a business that accepts credit cards and stores customer data. It should focus on the regulatory and ethical aspects of cybersecurity and explain how the policy will comply with applicable consumer privacy and customer data storage laws.

Scenario Your company, BuyTheTek, has just been named rising star! In order to take your business to the next level, you must start taking and processing credit card orders internally instead of using the small, less reliable 3rd-party company you now have in place. To address this challenge, you brought in a security consultant to ensure you take the right next steps. Per her recommendation, an IT security policy and execution plan needs to be created to conform with privacy and data storage laws and regulations. The policy and subsequent plan should outline the people, process and technology attributes needed to create a secure environment for your soon-to-be extremely happy credit card-paying customers! Formatting & Sources Please write your paper in the MLA format. You may refer to the course material for supporting evidence, but you must also use 3 other sources and cite them using the MLA format. Please include a mix of both primary and secondary sources, with at least one source from a security journal. If you use any Study.com lessons as sources, please also cite them in MLA (including the lesson title and instructor's name). Primary sources are first-hand accounts such as interviews, advertisements, speeches, company documents, statements, and press releases published by the company in question. Secondary sources come from peer-reviewed scholarly journals, such as the Oxford Academic Journal of Cybersecurity. You may use sources like JSTOR or Google Scholar to find articles from these journals. Secondary sources may also come from reputable websites with .gov, .edu, or .org in the domain. (Wikipedia is not a reputable source, though the sources listed in Wikipedia articles may be acceptable.)