Chapter 4, Problem 1RQ

Explanation of Solution

Information security policy:

Information security policy defines the set of rules of all organization for security purpose.

• It helps the employees what an organization required, how to complete the target and where it wants to reach.
• It helps to manage data access, web-browsing behaviors, passwords usage and encryption, email attachments, and so on.
• It is designed to provide structure in the workplace, create a productive and effective work place.
• It is free from unnecessary distractions.

Critical to the success of the InfoSec program:

• InfoSec is to protect the Information of workers and customers; it is difficult to maintain this policy in an organization.
• Even though InfoSec policy is considered the least expensive means of control, it offers difficult to implement.
• Therefore, the above problems are critical to the success of the InfoSec program.