Entrust, Inc. provides identity$-$based security solutions to over $4,000$ government and business organizations. Realizing the need for an information security governance framework, the CEO, Bill Conner, teamed with the Business Software Alliance to create a task force, and their report was released in $2004.$ Among some of their findings were that executive management, including the board of directors, are often not included in the risk assessment process, even though they are ultimately responsible. Bill Conner lead the task force, using Entrust as a case study, and included all of Entrusts senior management, not just the CIO, in the process. The head of each business unit was responsible for identifying risks and recommending policies. After $5$ months the task force met again to review and refine their assessments and policies by considering employee behavior, which lead to a series of narrow assessments, following a model for continuous improvement. The task force determined that communicating risk needs to be done using simple language that makes it easy to make decisions, rather than one that would require interpretation. Each business unit is responsible for assessing and improving their information security program, and an independent audit is conducted each year, with the results reported directly to the board of directors.

 

$1.$ What could Bill Connor have done differently to improve communication? Please explain using Human Factors that were not utilized in your response e$.$g$.,$ abilities, limitations$,$ behaviors, and processes.

$2.$ Do you support Bill's decision to use a third$-$party to create a task force? The third$-$party is Business Software Alliance $($BSA$).$ Explain your response. In your response provide at least three $(3)$ recommendations. Why did you choose these recommendations? If you did not provide recommendations, explain why.

$3.$ What human factors would you have applied in this case study? Explain.

$4.$ What could the task force have done differently to improve its language barrier? Explain.