Information Security Handbook

Establish key initiatives

The key initiatives that you define take your strategy and define it down further to tasks that you want to implement to improve the overall security of your organization. You still want to follow all previous guidance ensuring that you are aligning these initiatives with the needs of your organization.

The following example initiative can be used as a template for your information security program:

• Initiative: Security policy, standards, and guidelines framework.
• Enables strategic goal: Information security guidance—facilitate the protection of information systems and data by providing IT security policies, procedures, and supporting guidance.
• Description: Develop, approve, and implement information security policies, ...