In addition to the infosec-related entries in the general IT governance documentation you need to have a dedicated Information Security Policy. This should include such sections as:<\/p>\n

\n
• Purpose, Scope, and Objectives<\/strong>: A section describing the purpose of the infosec program, its scope within the organization\u2014is it company-wide or site specific\u2014and its overall objectives.<\/li>\n
• Access Control<\/strong>: A description of the access controls that are in place, and what an employee must do to apply for access.<\/li>\n
• Operations Plan<\/strong>: An operations plan is the set of active provisions that are designed to ensure that your information is always available to those who need it.<\/li>\n
• Responsibilities<\/strong>: A list of the organization\u2019s staff roles and positions that are involved in the safeguarding, including who is ultimately responsible for infosec. Nominated individuals<\/li>\n
• Glossary<\/strong>: A glossary of key terms used in the document. Whoever reads it must understand it. Impenetrable policy documents are not impressive, they are an impediment to their own efficacy.<\/li>\n<\/ul>\n

  It\u2019s About Handling Risk<\/h2>\n

  Like cyber security, information security is about risk. Understanding the risks, using technology and other measures to mitigate the risks, and governing the use of information through policies and procedures to ensure that it is used safely and lawfully.<\/p>\n","protected":false},"excerpt":{"rendered":"

  Information security and cyber security are terms that get used interchangeably, but are they really the same thing? We explain the subtle differences between these two closely allied and yet different disciplines. Same But Different? Cyber security is the name for the suite of behaviors, controls, and technologies that make up an organization\u2019s response to […]<\/p>\n","protected":false},"author":10,"featured_media":3658,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[25],"tags":[],"yoast_head":"\n