Developing IT Security Policy: Management Policies and Plans

Who generates and controls the information, existing policies, possible enhancements, acceptable risk levels, and the cost of potential risks.

To outline the action steps for achieving security plan goals and to determine the necessary tools, technologies, policies, and procedures.

To educate and train users, keep management aware of security threats, maintain the chosen security tools, and administer access controls, authentication procedures, and authorization policies.

<p>To examine the firm's overall security environment, review technologies, procedures, documentation, training, and personnel, and assess control weaknesses and their potential impact.</p> Signup and view all the answers

<p>An example can be found at <a href="https://www.novell.com/documentation/password_management31/">https://www.novell.com/documentation/password_management31/</a> and its purpose is to determine different levels of access to information for different users.</p> Signup and view all the answers

<p>Risk Assessment, Develop an IT Security Policy, Security Audit, Create a Security Organization, Implementation Plan</p> Signup and view all the answers

<p>Inventory the assets related to information and knowledge</p> Signup and view all the answers

<p>Estimate the value of money involved for each asset, and the value of probability of the loss occurring</p> Signup and view all the answers

<p>Prioritizes information risks, identifies acceptable risk targets, and identifies the mechanisms for achieving targets</p> Signup and view all the answers

<p>The nature of the risks, the information assets to protect, procedures to address the risk, implementation, and auditing mechanism</p> Signup and view all the answers