Network Security · 2002 · 100 citations · 0 references
ComputingInformation SystemsInformation TechnologyInformation Security ManagementSecurity GovernanceSecurity PolicyInformation Security ControlsInformation Security GovernanceInformation Security PolicySecurity ControlsSecurity ManagementSecurity StrategyInformation PolicyPolicy ComplianceSecurity Decision-making
It is a well-known fact that the information security policy is one of the most important controls needed within an organization to manage the implementation and ensure the effectiveness of information security. The information security policy is essentially the direction-giving document in an organization and defines the broad boundaries of information security. Furthermore, it indicates management’s commitment to, and support for, information security in an organization and defines the role it has to play in reaching and supporting the organization’s vision and mission.