CompTIA® Security+™: Study Guide, Fifth Edition

Policies You Should Have

The policies and procedures your organization uses have a huge impact on your ability to manage a secure environment. Although your primary role isn’t that of policy maker, you need to understand two critical areas to succeed: human resource policies and certificate policies. These are should-haves as opposed to must-haves because while an organization can survive without them, it will find the environment much more manageable in their presence.

Human Resource Policies

Human resource policies help the organization set standards and enforce behaviors. From a security perspective, this is critical. As a security administrator, you won’t generally be making policy decisions, but you have an impact on how policies are developed ...