Writing Information Security Policies

Summary

Management support is crucial for a successful information security program. Along with its support is a responsibility to the ongoing maintenance of this program. We emphasize the responsibilities of management and the roles of those who must provide enforcement. To have a successful security program, these groups must have a good understanding of their function and be willing to take action. The level of compliance measures this success. Compliance can only happen if everyone knows about the policies through a comprehensive training and awareness program.

1. Management responsibility:

   • Participate and support an Information Security Management Committee.

   • Information ownership includes assignment of responsibility for information asset ...