Security Policy Roadmap - Process for Creating Security Policies (2002)
| Venue: | Sans Institute Electronic Library Available online at http://rr.sans.org/policy/roadmap.php Sourced on the 29th |
| Citations: | 1 - 0 self |
BibTeX
@INPROCEEDINGS{Kee02securitypolicy,
author = {Chaiw Kok Kee},
title = {Security Policy Roadmap - Process for Creating Security Policies},
booktitle = {Sans Institute Electronic Library Available online at http://rr.sans.org/policy/roadmap.php Sourced on the 29th},
year = {2002}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
Version 1 Information is an important business asset and is valuable to an organization. Thus, it needs to be protected to ensure its confidentiality, integrity and availability. The very first thing in information security is to set up policies and procedures on how to protect information. This paper presents a systematic approach in developing computer security policies and procedures. All the processes in the Policy Life Cycle will be discussed. In particular, it will list all the issues and factors that must be considered when setting up the Key policies. fingerprint It makes = AF19 some FA27 recommendations 2F94 998D FDB5 and DE3D suggestions F8B5 06E4 on A169 relevant 4E46 areas and produces a framework for setting security policies and procedures. Identifying safeguards and controls that protects information from security threats can be time-consuming that needs a lot attention and planning. As a result, the ISO 17799 is used as a security checklist to help in developing the policies and measuring its compliancy. This policy will then reflect the business and technical needs of the multiple business units and users within the organization. 1.
