Bumi, a company committed to maintaining high standards of information security, seeks to develop comprehensive policy and procedures for SOC II, ISO 27001, and incident management controls. The goal of this project is to create a structured framework that aligns with industry standards and ensures the protection of sensitive data. Learners will apply their knowledge of information security principles to draft clear, concise, and effective policies. The project will involve researching best practices, understanding regulatory requirements, and tailoring policies to fit Bumi's operational context. This project provides an opportunity for learners to bridge theoretical knowledge with practical application, enhancing their understanding of information security management systems.

The deliverables for this project include a set of well-documented policies and procedures that address SOC II, ISO 27001, and incident management controls. These documents should be clear, comprehensive, and aligned with industry standards. Additionally, a presentation summarizing the key elements of the policies and their implementation strategies will be required. The deliverables will demonstrate the learners' ability to translate complex security requirements into actionable organizational policies.