Chapter 13, Problem 14RQ

Explanation of Solution

Security policy:

• A security policy defines an organization’s security requirements, as well as the controls and sanctions needed to meet those requirements. A good security policy delineates responsibilities and the behaviour expected of members of the organization.
• A security policy is a well written document in an organization giving the guidelines to how to protect the organization from threats, including computer security threats, and how to handle situations when they do occur.
• A good security policy must identify all of a company's assets as well as all the potential threats to those assets...