ABSTRACT
Now that the client has a completed Security Master Plan, it is vital that it be kept up to date and that this document is used as an integral part of the operating plan. Several aspects of the master plan must be addressed and updated on a routine basis. I usually recommend to the client that for the first year, the plan should be reviewed at least every three months to determine if any changes are needed. After the first year, the plan should be reviewed every four months, or three times a year, to ensure that the plan is still correct and, even more importantly, to make sure the plan is being followed. Anytime there are changes of any significance, the plan should be updated and redistributed to the original recipients with a cover letter that highlights the changes and the reasons for them. Like most important documents, it is valuable to indicate a revision number and date on each new copy.
