Brookdale Hospital is located in Brooklyn, New York and has developed and implemented its acceptable use policy (AUP) that resulted in security controls from the following family names: access controls, identification and authentication, personal use of Internet, security awareness training, and audit and accountability. Using the ISCM steps, describe how you would devise a strategy to monitor the effectiveness of this policy. Recall the activities from the self-test and briefly describe each step.

2. Establish an ISCM program that identifies key metrics that should be monitored for the security control/controls that you selected in the first step. Think about the automated process that could generate a report.