COIT20263 Information Security: Confidential Policy Cosmos (T1)

This document presents a comprehensive confidential information policy developed for the Cosmos organization, an online news provider based in Australia. The policy outlines the statement of purpose, authorized and prohibited uses, systems management, violations of policy, policy review and modification, and limitations of liability. It details the roles of freelancers, clients, and users, emphasizing the importance of maintaining data security and adhering to media regulations. The policy also covers the responsibilities of the technical team in managing the website, ensuring data integrity, and supporting freelancers. The justification section highlights the ethical considerations and the need for stakeholders to comply with the policy to maintain business decorum. Assumptions are made regarding the stakeholders' adherence to the policy and the potential for increased user base with maintained quality. The document concludes with references to relevant literature on information security and journalism ethics.

Running head: INFORMATION MANAGEMENT
Information Management
Name of the Student
Name of the University
Author note

1INFORMATION MANAGEMENT
Confidential Information Policy
M
ark
al
located
M
ark
earned
1 Statement of Purpose
The cosmos is one of the biggest and the largest organisation in the
Australia for the section of the online news providers. It is located in the
Sydney, Australia which is also known as the hub of the IT companies in the
Australia. The working procedure of the organisation is very easy managed
and easy, the organisation is having a strong network of the freelancers who
delivers the news for the organisation. The news that the freelancers provide
are through checked by the technicians of the organisation and the proof-
readers and are then passed to the users (Laudon and Laudon 2016). The users
the main part if the organisation, all the news that the freelancers collect are
for the readers that is the users. The users are not only from the Australia but
from the entire world. The users gets the news from an application or from the
website of the organisation, the form of the news come in the format of the
articles or videos. In order to access the quality news of the channel the
customers must have to be registered with the organisation against a certain
fees for the news. While the advertticemtn providers can also opt for the
service in order to publish their own adds in the cosmos platform. In order to
publish the advertisements in the platform of the cosmos one of the major
thing that the adds providers needs to keep in mind is that the advertisements
that are been produced must be in accordance to the policy of the media rules,
meeting the terms and conditions of the government of the Australia (Hannah
3

2INFORMATION MANAGEMENT
and Robertson 2015). The freelancers who are willing to join the services can
register them self in the platform needs to fill up the form that is available in
the website of the organisation and visit the head branch of the organisation
and give a physical existence of the person. The freelancers are given some of
the equipment’s of that might be of use while reporting a news while in the
areas where there is very or poor network for the internet connectivity. This
organisation estimates that the number of the audience that is having now that
is approx. 10000 will certainly increase to 50000 within the next 3 years if the
quality and the authenticity of the news is maintained that the freelancers are
producing now. The organisation consist of the freelancers who provides the
news, clients whose ads are displayed, and the users for whom the news are
collected and published.
2 Authorised Uses
The users of the system of the organisation are divided into two of the
categories namely the authorised and the unauthorised or the prohibited users.
The authorised users are the one who have paid a minimal fees for the services
of the organization. The authorised users gets the access to the news and the
articles that are been produced by the organisation (Johnston et al. 2016). In
order to get the authentication of the user the user needs to register themselves
to the network of the organisation using the personal email ids, a single id
valid for only one device at a time. One id is valid for only one year of the
services and later needs to renew the services again for the support of the
organisation. In case of the freelancers the authorised freelancers are those
who have given the physical appearance in the office and taken the
3

3INFORMATION MANAGEMENT
equipment’s for the reporting purpose.
3 Prohibited Uses
As discussed earlier there are two types of the users in the
organisation, the authorised and the prohibited users. The prohibited users are
those type of the users who have register for the services of the organisation
but have not paid the fees for the same (Hanusch 2012). Once the payment of
the users are processed then only the prohibited users gets the status of the
authorised user. It is to be pointed out that the prohibited user is not granted
any of the services of the organisation until the payment is confirmed.
3
4 Systems Management
The organisation has a very skill set of the technicians who looks after the
entire organisation technical processes. The organisation has team of 20
peoples headed by the technical manager who looks after the technical staffs.
The work of the technical staffs included several task like the maintaining of
the website data security, maintaining the number of the freelancers as well as
the work of the freelancers (Davis et al. 2017). The news that are provided by
the freelancers are though checked and are then passed by the technician in the
website. The work of the technical aspects are also to solve the queries s of the
freelancers and provide them with proper support of the equipment’s of the
devices that are been given to them. The technical manage the user portal of
the organisation that from registering of the user to the delivery of the news in
the portal . It is the work of the technicians to understand whether the news
that are being provided by the freelancers are fake or copy news of any other
channel ( Rainer, Prince and Watson 2014). Also the freelancers are to be
3

4INFORMATION MANAGEMENT
guided for the assignments that are to be completed by the organisation. Apart
from this the technicians check thee advertisements of the agencies that are
willing to give the ad in the channel. The advertisements being the source
though which maximum amount of the revenue of the organisation is
generated, needs a very maintained and precise checking for the same. Also
the work of the technicians are to frequently update the websites for the
betterment of the business. As the entire work of the organisation is in the
internet, the organisation also needs various kinds of the techniques to prevent
any kind of the data loss or trespasses ( Hsu et al. 2017). This also comes
under the technician part. Further the technicians manages the portal that the
work of the organisation goes on 24/7 without any problems. The organisation
is very much dependent on the technical team. For this purpose the
organisation uses a very skill set of the technicians who have already mastered
this kind of the things.
5 Violations of Policy
There are certain policies that the organisation has for maintain the decorum
of the business and the work that is been done in the organisation. The
organisation has a very profound set of rules and regulation that every
employee of the organisation needs to follow including the permanent
employees. This set of the rules are maintained by the CEO of the organisation
(Vos and Craft 2017). IF any of the stake holders are found to break the
policies that have been described by the organisation can face legal charges
depending upon the circumstances (Starr, 2012). Also the shareholder might
get sacked from the organisation be it a permanent employee. The users of the
3

5INFORMATION MANAGEMENT
organisation products also needs to maintain and respect the terms and the
condition of the organisation otherwise may face penalties, or loss of the
candidature from the organisation (Weimer and Vining 2017). It is work of the
stakeholders to maintain the decorum of the organisation and main the respect
the privacy policies that have been introduced by the organisation for the
betterment of the stakeholders and the business work. The organisation holds
all the rights to sack any of the employees at any time without prior notice if
the policies are not meet.
6 Policy Review and Modification
The organisation is having a very strong set of the privacy policy and
terms and condition set for the each of the stakeholders. This privacy policies
describes the set of the norms that the stakeholder’s needs to follow thought
the time in the organisation (Carroll 2014). This set of the policy is beforehand
signed by everyone before the carrier in the organisation begins. According to
the policy the organisation holds all the rights to sack the employees and take
legal action in any circumstances . Also the policy describes that the
organisation holds all the rights to alter any of the terms and the conditions
mentioned before without prior notice to the employees and the stakeholders
have to accept it. This point is also mentioned beforehand in order to keep the
organisation face and secure form any of the legal actions.
3
7 Limitations of Liability
It is to be made clear to all the stake holders groups that the
organisation is not liable for the any of the penalties that any one might face if
3

6INFORMATION MANAGEMENT
the privacy policy, terms and the conditions are not meet. All the policies are
in accordance to the Australian government. The penalties that are given are
also in accordance to it. It is also to be mentioned that if any of the freelancers
are found to be doing any miscreant for the sake of getting better news for the
organisation, the organisation is not libel for the same and also the
organisation would not help the freelancer in any purpose (Terzi, Terzi and
Sagiroglu 2015,. Also it is to be mentioned that the freelancer may be sacked
by the organisation. The freelancer publishing fake news and other such
consent which are not suitable for the channel may face legal charges and
proceeding is not the legality of the organisation. The data and the
equipment’s that are given to the freelancers must also be kept secured.
Justification
The work of the organisation is to provide informative and useful news
to the public and highlight the events that are being occurring in the world. It
is the work of the reporters to bring those highlighted news in front of the
public and to make a clear quote. The news may be of the any domain, starting
from the politics to automotive. The world needs to know the truth and the
work of the organisation is to provide the same (Pollock 2015) . All the terms
and conditions that are made by the origination are made for this purpose and
hence all the freelancers needs to follow the same. In case of the ad providers
it is not an ethical practice to provide ads that are not suitable for the public
and hence are needed to follow the terms and conditions of the same .
(Smithies 2015). The stakeholders are must follow the terms and conditions of
the organisation in order to give a better result for the organisation and to
6

7INFORMATION MANAGEMENT
maintain the decorum in the business.
Assumptions
It is assumed that all the stakeholders will maintain the decorum of the
organisation and will not break any of the terms and conditions of the
organisations. In case of the freelancers it is assumed that none of the
freelancers will not break any of the law and order to get better news or copy
any news from any of the channels or try to publish any fake news that is
harmful for the organisation (Glynn, Arnow-Richman and Sullivan 2015). In
case of the ads providers it is assumed that the providers will not provide any
of the ads that are not suitable for the organisation. It is assumed that if the
quality of the work is maintained in the organisation the number of the users
in now limited to 10000 will increase to approximately 50000 in the coming
three years. It is assumed that the quantity of the news will also increase with
the number of the customers.
6
References
Hanusch, F., 2012. A profile of Australian travel journalists’ professional
views and ethical standards. Journalism, 13(5), pp.668-686.
Carroll, J.M., 2014. Confidential information sources: Public and private.
Elsevier.
Glynn, T.P., Arnow-Richman, R.S. and Sullivan, C.A., 2015. Employment
law: Private ordering and its limitations. Wolters Kluwer Law & Business.
Hannah, D.R. and Robertson, K., 2015. Why and how do employees break and
bend confidential information protection rules?. Journal of Management
2

8INFORMATION MANAGEMENT
Studies, 52(3), pp.381-413.
Hsu, J.S.C., Shih, S.P., Hung, Y.W. and Lowry, P.B., 2015. The role of extra-
role behaviors and social controls in information security policy
effectiveness. Information Systems Research, 26(2), pp.282-300.
Johnston, A.C., Warkentin, M., McBride, M. and Carter, L., 2016.
Dispositional and situational factors: influences on information security policy
violations. European Journal of Information Systems, 25(3), pp.231-251.
Laudon, K.C. and Laudon, J.P., 2016. Management information system.
Pearson Education India.
Pollock, J.L., 2015. Knowledge and justification. Princeton University Press.
Rainer, R.K., Prince, B. and Watson, H.J., 2014. Management Information
Systems. Wiley Publishing.
Smithies, D., 2015. Why justification matters.
Starr, P., 2012. An unexpected crisis: The news media in postindustrial
democracies. The International Journal of Press/Politics, 17(2), pp.234-242.
Terzi, D.S., Terzi, R. and Sagiroglu, S., 2015, December. A survey on
security and privacy issues in big data. In Internet Technology and Secured
Transactions (ICITST), 2015 10th International Conference for (pp. 202-207).
IEEE.
Vos, T.P. and Craft, S., 2017. Journalists in the United States.
Weimer, D.L. and Vining, A.R., 2017. Policy analysis: Concepts and practice.
Taylor & Francis.

9INFORMATION MANAGEMENT
Late submission penalty
Plagiarism penalty
Total 3
5