Every company operates within a complex combination of laws, regulations, requirements, competitor challenges, and partner expectations as well as being affected by morale, labor relations, productivity, costs, and cash flow. Within this environment, management must develop, publish, and maintain an overall security statement and directives. From the security team’s perspective, a security program addresses these directives through policies and their supporting elements, such as standards, procedures, baselines, and guidelines. FIGURE 9-1 shows the elements of a security policy environment.
FIGURE ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month, and much more.
