ABSTRACT

The writing of information security policies is what makes most information security practitioners leap to their feet in the morning to do-NOT! Many practitioners struggle with this area of our chosen profession. But have no fear, there are those lurking in the shadows that do enjoy writing. I may not be the best one at writing policies, but I have been asked repeatedly to write policies for companies and corporations for more than 25 years.