CompTIA Security+™: Study Guide, Fourth Edition

8.3. Generating Policies and Procedures

The policies and procedures your organization uses have a huge impact on your ability to manage a secure environment. Although your primary role isn't that of policy maker, you need to understand four critical areas to succeed. The following sections discuss human resource policies and business, certificate, and incident-response policies.

8.3.1. Human Resource Policies

Human resource policies help the organization set standards and enforce behaviors. From a security perspective, this is critical. As a security administrator, you won't generally be making policy decisions, but you have an impact on how policies are developed and enforced.

Human resource policies that consider security requirements will ...