15.0 – Identify Needs, Issues and Threats

15.0 – Identify Needs, Issues and Threats
There are important components which are necessary to have an efficient security policy implementation.  There could be an investigation into an existing security policy implementation or lack thereof. The primary motivation is to identify the nexus of threats and issues. Typically, the issues identified are not limited to the policy documents but include factors which can impact the effectiveness of policy and organizational security. Some of these issues are summarized as follows:   A culture of ignoring policies Minimal policy enforcement Policy updating and review ad hoc at best Deficient policy framework Minimal awareness of policies No formal non-compliance reporting…
To access this content, you must subscribe to this General Subscription, or log in if you are a member.

Share this post