
333
Chapter 14
Information
Security Policies: A
Practitioner’s View
Charles Johnson
e writing of information security policies is what makes most information secu-
rity practitioners leap to their feet in the morning to do—NOT! Many practitio-
ners struggle with this area of our chosen profession. But have no fear, there are
those lurking in the shadows that do enjoy writing. I may not be the best one at
writing policies, but I have been asked repeatedly to write policies for companies
and corporations for more than 25 years.
Contents
Definitions ........................................................................................................ ...