Snowden Whistleblowing Public Sector Security Policies Case Study what happened and how Snowden was able to access the data that he did, write a mini-secur

Snowden Whistleblowing Public Sector Security Policies Case Study what happened and how Snowden was able to access the data that he did, write a mini-security policy. Highlight at least three policies that you feel were violated in this case and address the policies that need to be in place to prevent those violations from occurring in the future. Make sure to incluce enough detail that it could be amended to an existing policy and clear enough that any/all employees know what the new policy addresses.Part 1:Write 2-3 paragraphs at the beginning of your paper explaining the three issues you want to address and why. Follow APA guidelines for paper format and make sure to check spelling/grammar prior to submitting.Part 2:Write your mini-security policy following the template in textbook addressing the three issues you identified. Part 1
Public Sector Case Study
In May 2013, Edward Snowden, a National Security Agency (NSA)
contractor, met a journalist and leaked thousands of documents detailing
how the U.S. conducts intelligence surveillance across the Internet. In June
2013, the U.S. Department of Justice charged Snowden with espionage. Not
long afterward, Snowden left the United States and finally sought refuge in
Russia. The Russian government denied any involvement in Snowden’s
actions but did grant him asylum.
While this story reads like a spy novel, it raises a number of information
security policy questions. For this discussion is not important whether
Snowden was a traitor, a spy, or a whistleblower. The issue here is the
security policies and controls that allowed a part-time NSA contractor to
gain unauthorized access to highly sensitive material. This is particularly
important because in April 2014, the Department of Defense announced
adoption of the NIST standards. Would the Snowden breach have been
prevented if the NIST standards had been adopted earlier?
Given the secret nature of the NSA, the full details of how this breach of
sensitive data occurred may never come out. However, reports indicate that
Snowden worked part time for an American consulting company that did
work for the NSA in Hawaii. There he gained access to thousands of
documents that detailed how the U.S. government works with
telecommunication companies and other governments to capture and
analyze traffic over the Internet. The details of the scope and nature of this
global surveillance program were not publicly known and considered
secret.
It’s clear from the reporting that Snowden had excessive access; that is to
say, he was granted access beyond the requirements of his job. Additionally,
reports indicated that he used other people’s usernames and passwords. He
obtained these IDs through social engineering. Finally, consider the way in
which he accessed and captured the information. Some reports indicate he
used inexpensive and widely available software to electronically crawl
through the agency’s networks. There are also indications that he removed
the information on a USB memory stick.
FYI

Purchase answer to see full
attachment