InfoSec Policies & Procedures

Information security policies and procedures are the cornerstone of any information security program – and they are among the items that typically receive the greatest scrutiny from examiners and regulators.

But beyond satisfying examiners, clear and practical policies and procedures define an organization’s expectations for security and how to meet those expectations. With a good set of policies and procedures, employees, customers, partners and vendors all know where you stand and where they fit in re: information security.

The key to creating effective policies and procedures is to start with a solid risk assessment, and then follow a measured program that includes:

• Implementation
• Monitoring
• Testing
• Reporting

This webinar is designed for IT professionals, risk managers, auditors or compliance officers who are responsible for writing, approving or reviewing security policies or procedures.

It's a daunting task to create effective policies and procedures, and it’s ongoing work to monitor and maintain them. But in this age of endless information security threats, please remember: It’s better to have incomplete implementation of policies and procedures than to have none at all.

> Register for this webinar