1. Security Plans, Policies, Procedures, and Models (20 points).

a. Describe the key features of a Security Plan (What is it? Why is it important? What are its key parts? Who is it for? How does it work or not work? (Problems with creating and implementing).

b. What is the role of Security Policies? (What is a Security Policy? How do Policies relate to Procedure? How do Policies relate to the Security Plan?)

c. What is the role of Security Procedures? (What is a Security Procedure? How does it relate to Security Policies and Plans?)

d. What is the purpose of a Security Model? (What do models do? How do they do it? What is in a model? What is not in a model?)