Security Policies and Implementation Issues, 3rd Edition

Organizational Support for IT Security Policy Enforcement

Abuse of a company’s technology can leave it at risk. Failure to follow policies can lead to regulatory noncompliance. Failure to follow up and resolve issues can result in lawsuits. These situations can lead to more regulatory sanctions and expensive legal fees.

Enforcement of security policies needs to be ingrained in an organization. Many people must participate—enforcing policies is not a one-person role. Enforcement of policies is achieved through layers. This includes organizational committees enforcing policies and monitoring workers’ actions. Each layer validates that security policies are being followed. The goal is to build awareness and enforcement throughout the organization ...