Organizations around the world often assess their IS security mechanisms and practices

Organizations around the world often assess their IS security mechanisms and practices by using the

Trusted Computer System Evaluation Criteria (TCSEC) or Information Technology Security Evaluation Criteria (ITSEC). The two standards are similar, though there are distinctions.

Assume that you are the security manager for an organization that writes software. You are reviewing the proposal for a new chat program to be sold for use within an organization. Members of the organization can be physically located anywhere around the world, and your company is promising that all chat communications will be secure.

In a 3- to 4-page report, perform the following: