Question

Security professionals should be kept updated on changes in the laws that affect them. How could that best be accomplished?

Answer 1

The dependence of modern business on technology is immense. The security of a company is critical and has to be part of everything the company does. The company has to ensure its systems and technology is secure by creating a security culture. It will transform security from a onetime activity to an activity that generates a lifecycle that will generate security forever.

The key challenge is to keep security policies and updated as per the laws and the regulations. The policies in a program should be regularly reviewed which includes, updating, translation, version control, everything which gives people to have access to the latest policy.

The five policy management steps your business can take are as follows:

• Dedicated policy owners: We need to have a policy owner who reflects on the need to adopt the policy according to company practices, changing laws and regulations. The owner has to ensure the policy is reviewed and updated as per the latest regulations.
• Easy access and availability: There should a place to house the policies and have them easily accessible to all teams. The team should be able to get their answers at the automated policy portal. The policy should be easy to understand and accessible to users so that compliance can be ensured.
• Interdepartmental communication: Delegating management of policy across departments and ensuring that the departments are in sync is critical to meet the laws and regulations. The teams from HR, legal and statutory compliances should meet regularly to ensure the regulations are followed and policies are upgraded.
• Training on policies and statutory compliances should be initiated online. This will make it easy to track who saw the policy, read it, acknowledged it and who completed the certification.
• Automation and incident management: online training and compliance can be monitored by version control. You can track who saw the policy across the globe especially if the company is operating globally. It can ensure regular monitoring, controlling and reviewing of the policies.

To conclude though security control is initiated and managed by a few key employees it is the task of all team members to keep updated about the statutory compliances and new laws. The company can ensure compliance by online training modules and continuously upgrading the policies and monitoring new versions are being used or not across the organization.