Context
- Security policies identify the assets to be protected and the protection afforded those assets.
What is protected
Who is responsible for the protection
How well the protection is to be performed
What the consequences are for protection failure
Policies should be unambiguous, well organized, well maintained, and balanced between ...