Writing Information Security Policies

Intellectual Property Rights and Policies

Every organization, regardless of its function, has intellectual property that it protects from disclosure. Even if the organization does not have information security policies, it probably has rules and procedures for safeguarding its intellectual property. Not every organization puts the same emphasis on this property, however. For example, a company that is a price differentiator will guard its manufacturing process to prevent its competitors from discovering how they can keep their prices down.

Intellectual property policies are probably the most difficult for most information security professionals to write. Not only are these policies tied to the business process, but the body of law covering ...