Title should be [ _ _ _ _] policy
- [ ] Introduction
- [ ] Purpose : Why do you need this policy
- [ ] Scope : Define who does this polcy apply to
- [ ] Version History
- [ ] Roles and Responsiblities
- [ ] Compliance Requirement
- [ ] Principles;
- [ ] Introduction ( optional)
- [ ] Definations ( optional)
- [ ] Purpose ( optional)
- [ ] Scope ( optional)
- [ ] Policy ( mandatory)
- [ ] Exception ( optional)
- [ ] Roles and Responsiblities ( optional)
- [ ] Compliance ( optional)
- [ ] Exception
- [ ] Defination
- [ ] Revision History
- information security is master policy . it contain all critical policy
- Policies name:
- Bussiness Continuety
- Password Policy
- Risk Management
- Access Control
- Data Control
- Asset Management
- Policy doesnt follow the IT/Security Framwork, IT follow the bussiness needs