Draft a memo to management indicating plans for any endpoint protection and encryption that you believe need to be implemented within the organization. This must be a professional memo using appropriate and professional language. You are making a case for getting the business to implement these changes. You must provide all appropriate rationale for either the use of or the lack of use of endpoint protection and encryption since you are trying to convince management to make use of your recommendations. This should not be a “do this because it’s best practice” argument. Instead, explain why your recommendation has value and what the business will get out of implementing your recommendation.
Your memo should open with specific, compelling reasons why the organization should implement your policy recommendations. What benefits will be gained? What problems will be solved or alleviated? End with a strong conclusion. Speak in a language that a manager understands, and make sure you appeal to management priorities.
Recommendations should be reasonably specific and justified; tell the reader, in top-level terms what actions to take and why (i.e. “Enable the jatzenframing module on all Linux servers. This will prevent kibabble data leakage through covert channels”). Your recommendations should stick to policies, and not the series of mouse-clicks to turn those policies on or off.
