Security Policies, Standards, and Procedures

This chapter is designed to assist in developing and implementing policies, standards, and procedures more effectively. Many organizations have policies, standards, and procedures but they may be unwritten. Unwritten policies create confusion, are difficult to enforce, and create inconsistent implementation of controls.