O'Reilly logo

Security Policies and Implementation Issues by Mark Merkow, Robert Johnson

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 6. IT Security Policy Frameworks

AN INFORMATION TECHNOLOGY (IT) security policy framework is the foundation of an organization's information security program. The framework consists of a library of documents. Organizations can use the framework to help build processes and acquire technology to enforce policies. The framework is also useful for putting security personnel in place to operate and maintain the program.

Organizations cannot afford to be reactive or operate in an ad-hoc fashion regarding information security. There's increased accountability and liability with regulations. There's increase demand from senior leadership to demonstrate value. There's a push and drive from security professionals to measure success. However, before ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required