Question

A security policy is a document that states how the organisation plans to protect the organisations information Technology assets. In your own words, state how a security policy affects the organisation's culture and the two things the policy must balance.

Answer 1

ANS 1. A security policy is adocument that states how the organization plans to protect the organizations information technology assets.

The Security Policy affects the organizatiion culture in following ways :

1. The security policy benfits the organization as it provides :

- Confedentiality

- Integrity

- Availability

* Because of these benifits the working culture of the organization improves as there is less fear of breach of security.

* The security policy affects the organization culture in a positive way i.e. the employees working in the organization can fully devote there time working instead of getting worried about security issues.

* Since people will be less worried about the security they will work up to the mark and this in turn will improve the culture of the organization , because if one is happy ans satisfied doing what they do it will surely uplift their mood and the wholemood of the organization.

* With the availability of the security policy the employees of the organization will be able to openly talk about things with certain boundaries and also will not fear away from sharing things that they want to .

--There surely needs to be a balance that needs to be maintained which are the the organizations benifits and the employees benifits.

* It is usually the same thing but sometime the organization can make such security policies that can put pressure on the employees working there, if they will be questioned for each and every things they do or are forced to do or follow some rules which are completly vague , this will eventually put a lot of mental stress on the employee working there and sometime can affect the way in which they function.

That can eventually hamper the growth of the organization.

So there needs to be balance between the security policy considering the Organizational needs as well as the employees needs.