Information Security Policies, Procedures, and Standards

Appendix B: Example Departmental Policy Tailoring Guide

This guide was developed to assist those assisting departments in the tailoring of information security policy templates into departmental information security policies. The guide provides general guidance for all departments and, where appropriate, specific guidance for “small departments” versus “large departments.”

B.1  Suggested Discussion with Department

Individual departments may have a myriad of questions or concerns regarding the information security policy tailoring project. However, they may not know where to begin in discussing the project. The discussion outline provided in Table B.1 has been useful in discussions with other departments and is documented as a suggested discussion ...