In business, a security policy is a document that states in writing how a company plans to protect the company's physical and
information technology (IT) assets. A security policy is often considered to be a "living document", meaning that the document
is never finished, but is continuously updated as technology and employee requirements change. A company's security
policy may include an acceptable use policy, a description of how the company plans to educate its employees about
protecting the company's assets, an explanation of how security measurements will be carried out and enforced, and a
procedure for evaluating the effectiveness of the security policy to ensure that necessary corrections will be made.
This was last updated in May 2007
Email Alerts
Register now to receive SearchSecurity.com-related news, tips and more, delivered to your inbox.
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States.
Privacy
More News and Tutorials
-
Adobe Reader X uses Microsoft's sandboxing technology to block potentially dangerous processes from executing beyond the confines of the software.
-
Microsoft repaired four vulnerabilities in its Forefront Unified Access Gateway and a critical flaw in Microsoft Office.
-
Download the entire October 2010 issue of Information Security magazine here in PDF format.
-
Articles
-
Resources from around the Web