APPENDIX D

image

Sample Cybersecurity Policy

A successful enterprise cybersecurity program begins with policy that is unambiguous, well organized, well maintained, and balances the enterprise’s security needs against its business priorities. It is important to organize this policy so it is easy to write, understand, and maintain over time. Cybersecurity policy establishes the foundation upon which the enterprise’s cybersecurity program is built, and represents a contract between the enterprise’s cybersecurity practice and the business. Through cybersecurity policy, the business and cybersecurity agree on the ways and extents to which cybersecurity ...

Get Enterprise Cybersecurity: How to Build a Successful Cyberdefense Program Against Advanced Threats now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.