Writing Information Security Policies

Chapter 3. Information Security Responsibilities

IF YOU ARE READING THIS BOOK IN chapter order, you probably want to start writing the policies. However, before you start to write your policy documents, you should really have a clear definition of the roles and responsibilities of the individuals in the organization with respect to security. As we have discussed in the first two chapters, management support is crucial for a successful information security program. Along with its support should come responsibility to the ongoing maintenance of this program. This chapter will emphasize the responsibilities of management and the roles of those ...