Writing the Policy

• Match your organization’s culture

• Use the “real” information channels

• Several sources for templates

  • NIST/TIS - http://csrc.nist.gov/isptg
  • Charles C. Wood - http://www.baselinesoft.com
  • Outside consultants

• Involve Legal, HR, Public Affairs

• Policy should be issued from as high in the organization as possible

Previous slide

Next slide

Back to first slide

View graphic version