1. CIS 222 DB 4
As the CISO, you are responsible for development and implementation of various security
policies to ensure the protection of company sensitive information and systems. There are
different levels of policy from executive level to issue specific and system level
policies.Discuss how the program policy leads to the other types of policies. Provide at least
two examples of issue specific policies and two system specific (codified) policies. Include at
least one research reference and associated in-text citation using APA standards. In your
replies to your peers discussing the examples given and how they can reduce risk to the
corporate network.