Components in a typical security policy

Question

There are numerous components in a typical security policy. Explain three important components.

Answer 1

Be it the network security, computer security or information security a typical security policy helps prevent inconsistencies by forming the basis for detailed standards, guidelines, and procedures. Policies make clear management's expectations of employee involvement in protecting information assets. Three basic and important components of a security policy are as follows

1. Purpose: This defines the objective of the security policy whether it is required to improve recovery time, to reduce cost/downtime, or management of overall confidentiality, integrity, and availability.

2. Scope and responsibilities: This provides on whom and what are covered by the policy such as facilities, technology, processes etc. and who is responsible to carry out the same.

3. Compliance: After the awareness program this component provides the effective enforcement of security policy.