Question

The authors believe that all information security begins with a solid policy. Brainstorm a list of reasons why this is so by creating a mind map. [Why established solid policies are important to information security?]

Answer 1

Information security is always considered as the main fundamentals of an organization when the organization is dealing with loads of data. An effective information security program usually consists of the comprehensive set of the information security procedures and policies which is considered as the cornerstone of the information security program.

• Solid information security policies include the Data Security and the GDPR which are quite effective in protecting organization's data as well the new European regulations for the data protection act.
• These policies generally identifies the procedures and rules which all the individuals accessing and then using the organization's IT assets as well as resources must follow.
• The main objective of these security policies is to address the security threats and then implement the strategies to mitigate the IT security vulnerabilities. not only this, but also these policies defines how to recover the infrastructure in case of critical events.
• These policies also provide guidelines to the employees on the basis of what needs to be done and what not to be done. These policies set the rules of what and all resources an employee can have access.