Enterprise-Wide Security Architecture and Solutions Presentation Guide

1.9 Developing a Security Policy

Figure 10. Developing a Security Policy

Key Points

A security policy is essential for an enterprise′s implementation of effective

security controls.

Presentation Script

A business must define its security needs in order to establish a management

security policy and practice guidelines. The definition of a security policy

includes:

•

Optional user data ownership, data classification schemes, application

security support, and information service provider security support, which

must ultimately define the specific responsibilities for protecting the business

assets

•

High level management commitment and responsibility supporting ...