Define Security Policies

Define Security Policy

Security policy is a statement of business requirements for security, translated into a logical structure that can be consistently applied, monitored and measured. Your security policy should be unique to your business. It communicates the intentions of your management team for managing risk and enforcing security in your

organization.

Security policy should be a living, breathing thing. It represents a culture that exists in the organization. It describes the way in which people behave when doing their work. It is a mindset that has been accepted and bought into at all levels of the organization. It is a message to the workforce from the management to tell them what is expected of them, and the results of it can be seen everywhere in the way that business processes are carried out.