You recently joined the IT staff of a midsize consumer products firm. After a malicious virus destroys some critical files, you realize that the company lacks a security strategy and policies.

Outline the steps you’d take to develop a program to protect data and the types of policies you’d recommend. How would you present the plan to management and employees to encourage acceptance? (Resources, Technology)