Writing Information Security Policies

Administrator’s Responsibility

The previous section of this chapter concentrated more on the management responsibility of enforcing the policies. Management might assign some of the monitoring and compliance issues to administrators, but those are left as implementation details. In the administrator’s policies, you should outline the areas for which the administrator will be responsible.

Some of the policies are not just for the Systems, Network, and Security Administrators. Administrative policies also can outline administrative responsibilities that are the responsibility of data and process owners as well as those responsible for users. These policies cover the administrative compliance and enforcement issues of the policies that fall outside ...