- In business, a security policy is a document that states in writing how a company plans to protect the company's physical and
information technology (IT) assets. A security policy is often considered to be a "living document", meaning that the document
is never finished, but is continuously updated as technology and employee requirements change. A company's security
policy may include an acceptable use policy, a description of how the company plans to educate its employees about
protecting the company's assets, an explanation of how security measurements will be carried out and enforced, and a
procedure for evaluating the effectiveness of the security policy to ensure that necessary corrections will be made.
Learn more about Information Security Policies, Procedures and Guidelines
Quiz: Mitigating Web 2.0 threats: Take this five-question quiz to test your knowledge of social networking sites, software-as-a-service and common Web attacks and threats.
Fact or fiction: Don't forget about your intellectual prop: By creating a data protection plan, security professionals are able to ensure valuable data remains under control and make more effective use of the assets within a company.
Check out the expert ...
Schneier-Ranum face-off part 6: Audience questions Wrapping up their face-off at ISD 09, Bruce Schneier and Marcus Ranum take questions from the audience on everything from strategies for protecting...
defense in depth(SearchSecurity.com) Defense in depth is the coordinated use of multiple security countermeasures to protect the integrity of the information assets in an enterprise......
Show me everything on 
- In business, a security policy is a document that states in writing how a company plans to protect the company's physical and
information technology (
