Under Control: Governance Across the Enterprise

3.5. A Life-Cycle Example

Let's look at an example of a policy life cycle as depicted in Figure 3-3. Note that some boxes that were included in Figure 3-2 have been removed for readability.

Figure 3.3. Policy life cycle example

Let's assume that your company processes credit card transactions, and therefore compliance with the PCI Data Security Standard (PCI DSS) regulation is a business requirement. The risk of noncompliance with PCI involves monetary fines. One of the requirements of the PCI DSS standard relates to the general statement that users' Primary Account Numbers must be unreadable.^[] This requirement is translated into a corporate ...