Managing Catastrophic Loss of Sensitive Data

Chapter 4. Data Security Policy

Solutions in this chapter:

• Standards and Procedures

• Benefits

• Goals and Trade-offs

• Policy Development Process

• Contents

• Related Policies

• Policy Implementation

• Update and Maintenance

• Compliance Audit

• Metrics

• Management Board Approval

Summary

Introduction

A data security policy forms the basis upon which an effective data security program is developed and managed. It is a formal statement that sets out an organization’s approach to managing information security, outlines the essential requirements for protecting data assets, and establishes management’s expectations for data confidentiality, integrity, and availability. It guides the ...