Establishing an Information Security Policy.docVIP

CHAPTER 1 Establishing an Information Security Policy “ Long-term planning is not about making long-term decisions, it is about understanding the future consequences of today’s decisions.” — Gary Ryan Blair, The GoalsGuy Information Security Policy Information security policy refers to the set of rules and practices an agency uses to manage and protect its information resources. Guide for Developing Security Plans for Information Resources In discussions of information security, the term policy has more than one meaning. Policy is senior management’s directives to create an information resour