Key Management Policy Policy Statement The enterprising key management policy for Slack Communications will require the company to use technologies for encrypting sensitive and confidential data for protecting the integrity of customers as well as employees. The policy will apply to all employees and affiliates to address the encryption policy and control organizational data. Reason for Policy The incorporation of enterprising key management policy is high on the corporate agenda as to the increase in security breaches of large corporations. In 2016 only, Centene Corporation (healthcare sector), Federal Bureau of Investigation (Department of Homeland Security), Seagate Technology, Internal Revenue Service, LinkedIn, 21st Century Oncology, Office of Child Support Enforcement, and dozens other companies and organizations reported security breaches and thefts of customer/employee information. Thus, there is a high need for Slack Communication to implement a cohesive EKM strategy for protecting its customers and employees from fraudulent security breaches and making sure that the stolen data can be recovered. Moreover, Slack communications allow users to “manage security, policy, and compliance across all of Slack” (Slack, n.d.), which is another reason for policy implementation. Definitions Enterprising key management (EKM) has emerged as a result of high-profile data breaches and identity thefts in large organizations. EKM is defined as a framework of efforts targeted at providing centralized management (e.g. key generation, backup, and recovery) for making sure that the lost data can always be recovered (Pate, 2009). Also, EKM is effective in helping companies manage and modify their keys in the course of the life cycle. Key management policy is defined as the secure administration of cryptographic keys. Cryptographic keys are data strings composed of binary zeroes and ones that make up cryptographic algorithms used for manufacturing “ciphertext” output from “cleartext” input (KPMG, 2002). Responsible Executive and Office The It department manager will be responsible for the execution of the policy since he or she has access to all procedures the department of technology implements as well as possesses knowledge and skills regarding EKM. Who is Affected? The IT department will experience the most impact from the policy because employees there are responsible for policy execution. Also, customers will be affected by the changes in existing policies as well as other employees that will be required to comply with the policy. Procedures General   * Establishment of a cohesive key management lifecycle: generation, distribution, usage, and storage (operational, backup, and archive).   * Key recovery procedures;   * Key reissuing;   * Key Escrow (BITS, 2008);   * Procedures of key retirement: replacement, deregistration, revocation, and deletion (BITS, 2008). Rules of Behavior   * Following the established guidelines and procedures;   * Nondisclosure of the policy details to third parties;   * IT Department Manager – communicating with employees about the policy importance;   * Commitment to the policy’s success. Training All employees in the IT department should be trained on how to incorporate the policy. Cryptanalysis, the transformatio