Information security policy: Information security policy defines the set of rules of all organization for security purpose. It helps the employees what an organization required, how to complete the target and where it wants to reach. It helps to manage data access, web-browsing behaviors, passwords usage and encryption, email attachments, etc. It is designed to provide structure in the workplace, create a productive and effective work place. It is free from unnecessary distractions.

Question

Want to see the full answer?

Answer 1

Question

Chapter 4, Problem 2E

Program Plan Intro

Information security policy:

Information security policy defines the set of rules of all organization for security purpose.

It helps the employees what an organization required, how to complete the target and where it wants to reach.

It helps to manage data access, web-browsing behaviors, passwords usage and encryption, email attachments, etc.

It is designed to provide structure in the workplace, create a productive and effective work place.

It is free from unnecessary distractions.

Expert Solution & Answer

Want to see the full answer?

Check out a sample textbook solution

See solution

Students have asked these similar questions

To learn more about your institution's security rules, look them up on the intranet or website. Is there a corporate security policy somewhere? Where have you come across security rules that are tailored to address a particular problem? What agency or department is in charge of issuing or coordinating all of these policies, or are they dispersed across the organization? Use the framework provided in this chapter to determine whether or not the policies you found in the preceding exercise are complete. What are the omissions in these areas?

A security mechanism is a method, tool or procedure for enforcing a security policy. (a) What are the different types of mechanisms that can be used to secure the system? Give ONE (1) example for each mechanism.

Search your institution's intranet or Web site for its security policies. Do you find an enterprise security policy? What issue-specific security policies can you locate? Are all of these policies issued or coordinated by the same individual or office, or are they scattered throughout the institution? Using the framework presented in this chapter, evaluate the comprehensiveness of each policy you located in Exercise above Which areas are missing?