Enterprise Security Policy

A well-planned security policy can control the chance of any security lapse considerably. In India today, even though most corporates are aware of the security issues, many of them do not have a formal security policy and do not provide any training or education on security policies to their employees. Organizations need to adopt effective Security Policies to fortify their information systems. An effective security policy needs to have some significant forward-looking policy directives, which will ensure a foolproof security planning. It needs to be a formal document, which clearly delineates areas of responsibility amongst the staff. It needs to provision for appropriate training of employees to make sure that the system remains foolproof and optimally tuned. Further, it needs to be constantly tested, upgraded and reviewed-so that it stays in line with the changing environmental dynamics. Implementation of the security policy leads to deployment of security solutions.

Information Security begins with Vulnerability Scanning/Risk Assessment. An organization will form its security policy after analyzing the reports generated through system audits. While drafting a policy every enterprise will have its own security priorities largely based on its operating environment, requirements and perceived threats.

Next