Writing Information Security Policies

摘要: From the Publisher: Administrators, more technically savvy than their managers, have started to secure networks in a way they see as appropriate. When management catches up notion that security is important, system administrators already altered goals and business practices. Although may be grateful these people for keeping network secure, efforts do not account all assets requirementsFinally, someone decides it time write policy. Management told of necessity policy document, support its development. A manager or administrator assigned task come with something, fast!Once policies are written, must treated living documents. As technology requirements change, updated reflect new environment—at least one review per year. Additionally, include provisions awareness enforcement while impeding corporate goals. This book serves guide writing maintaining all-important policies.