Establish a system security monitoring policy addressing the need for monitoring, policy scope, and exceptions and supported by specific, credible sources.

Justify the need for monitoring.

Define the scope of the policy $($the personnel, equipment, and processes to which the policy applies$).$

Provide guidelines for policy exceptions, if approved by the IT and Security departments.

Establish a system security patch management and updates policy addressing the need for patch management and updates, policy scope, and exceptions and supported by specific, credible sources.

Justify the need for patch management and updates, aligned with ISO$/$IEC $27002.$

Define the scope of the policy $($the personnel, equipment, and processes to which the policy applies$).$

Provide guidelines for policy exceptions, if approved by the IT and Security departments.

Support your main points, assertions, arguments, or conclusions with at least four specific and credible academic sources synthesized into a coherent analysis of the evidence.