Sound Security Policy

A well-designed information security policy is necessary for an organisation to have an effective IT security system. Senior management must make sure that this policy is updated whenever there are changes in employee and technology requirements.

Necessary security policy

The policy should include the minimum standards, requirements, procedures and objectives that are essential to the business. It should also contain the roles and responsibilities of the employees when it comes to information security. Furthermore, it should detail the processes for reporting and resolving security breaches. Other issues that need to be addressed are the use of Internet services by the employees, as well as the standards, practices and guidelines that need to be followed in its usage.