Question

Learning Objective: Evaluate the purpose and contents of the three major types of information security policies: Enterprise information security program policy, Issue-specific information security policies, Systems-specific policies.

In at least 250 words, discuss the following in your main post.

1. Revisit the organization from week three or pick another organization where you have access to one of their publicly available security policies.
2. Identify the organization, policy type, and the policy's importance to the organization. Be specific.

Answer 1

Data Security or Information Security helps in recognizing the valuable assets of the organization. It also describes of the guidelines about what is ethical and unethical to do for the worker to guarantee security of data.

An association with no data security is in danger. The information security approach's essential concern is to co-ordinate the data security endeavors of the organization.

Various types of Data Security Policies are:

1. Enterprise Information Security Policy

Enterprise information Security Policy sets up key heading or the direction, extension and tone for association's security exertion and gives obligations regarding diverse zone of data security. Enterprise Information Security Policy gives rule to the improvement , execution and the executives essential of the data security program.

2. Issue-Specific security Policy

Issue explicit arrangements gives point by point guidelines, and direction to all individuals from the association in the utilization of an asset, for instance process or innovation utilized by the association. Each association's Issue-Specific Security Policy should address explicit innovation based frameworks, and should be refreshed much of the time.

3. Systems specific Security Policy

System Specific Security Policy is not like the other security policies. They can be frequently made to work as guidelines or strategies that can be utilized while arranging the frameworks. For eg:- Design and activity of a system firewall.