Writing Information Security Policies

Other Information Security Roles

For any information security program to be successful, it must be integrated into every aspect of the environment. Integration must include statement of work and responsibilities within the business environment, job descriptions, and how these will be audited and monitored.

Integrating Information Security into the Business Process

A primary task in assigning roles in the information security process is how information security integrates into the business environment. As part of that integration, jobs that support security through the processes should be defined. For example, one way to do this is to define a separation of duties and control over company assets by coordinating efforts with everyone, including ...