Basic Information that a Security Policy Must Stipulate

BBA 3551 Unit 8 #7
Name:
Institution:
Security policy
In a business context, a security policy refers to a document that explains in writing how an organization intends to protect organizational, physical and information technology (IT) assets (Kroenke, 2015). Companies recognize a security policy as a "living document," because it never gets finished. Instead, it is continually updated so as to fit the new technology and employee requirements resulting from changes in the business environment.
Basic information that a security policy must stipulate
First, the security policy should be well defined to indicate the organizational security vision so as to help employees understand the intention of the policy. A company's security policy should also contain an acceptable use policy. The policy should describe how the company plans to educate its employees about protecting the business's assets (Kroenke, 2015). The kind of educational training should be described considering its effectiveness and cost implication. Thus, the security poli...