Information Security Fundamentals, 2nd Edition

6  ◾  Information Security Fundamentals

Policy Key Elements

To meet the needs of an organization, a good policy should:

◾ Be easy to understand. It is important that the material presented meet the require-

ments of the intended audience. All too often, policies, standards, and procedures

are written by subject experts and given to a general use audience. e material is

often written at a college or technical level when the average reading and compre-

hension level in the workplace is that of a sixth grader (a 12-year-old).

◾ Be applicable. When creating policy, the writer may research other organiza-

tions and copy that document verbatim. is may be expedient; however, it

is very important to ensure that whatever is written meets the needs of ...