Chapter 13, Problem 2CE

Program Plan Intro

Security policy:

• A security policy defines an organization’s security requirements.
• It provides controls and consents needed for meeting requirements.
• A security policy is a well written document in an organization giving the guidelines to how to protect the organization from threats.
• It includes computer security threats, and how to handle situations when they do occur.
• A good security policy must identify all of a company's assets as well as all the potential threats to those assets.
• The employees of the company need to be kept updated on the company's security policies.
• The policies themselves should also be updated regularly.