Building an effective information security policy architecture / Sandy Bacik.

"An Auerbach book."

Includes bibliographical references and index.

1. Introduction --- 2. The Enterprise --- 3. What Is a Policy Architecture? --- 4. Getting Ready to Start --- 5. Writing the Documents --- 6. Additional Key Policy Topics --- 7. Putting It Together --- 8. Crafting Communication for Maximum Effectiveness --- 9. Security Monitoring and Metrics --- 10. Continuing to Mold Your Style Through Experience.

Information security teams are charged with developing and maintaining a set of documents that will protect the assets of an enterprise from constant threats and risks. In order for these safeguards and controls to be effective, they must suit the particular business needs of the enterprise. A guide for security professionals, Building an Effective Information Security Policy Architecture explains how to review, develop, and implement a security architecture for any size enterprise, whether it is a global company or a SMB. Through the use of questionnaires and interviews, the book demonstrates how to evaluate an organization's culture and its ability to meet various security standards and requirements. Because the effectiveness of a policy is dependent on cooperation and compliance, the author also provides tips on how to communicate the policy and gain support for it. -- Back cover.