登录查看更多内容

点击“继续加入或登录”，即表示您同意遵守领英的《用户协议》、《隐私政策》及《Cookie 政策》。

How do you keep security policies and standards consistent across platforms?

由人工智能和领英社区提供技术支持

Security policies and standards are the foundation of any information security program. They define the rules, roles, and responsibilities for protecting the confidentiality, integrity, and availability of data and systems. However, keeping them consistent across different platforms, such as cloud, mobile, web, and network, can be challenging. In this article, you will learn some best practices for creating and maintaining security policies and standards that are aligned with your business objectives, regulatory requirements, and industry best practices.

此文章中的业界达人

由社区从 3 条内容中精选。了解更多

Aby Rao
Karthik Krishnamoorthy

Founder & CEO @ Intentify Digital Media (We're Hiring) ? Graphic Design ? LinkedIn Content Marketing ?…

1 Assess your current state

Before you can improve your security policies and standards, you need to know where you stand. You should conduct a gap analysis to identify the strengths and weaknesses of your existing policies and standards, as well as the risks and opportunities for improvement. You should also review the compliance status of your platforms and the audit findings from previous assessments. This will help you prioritize the areas that need the most attention and resources.

添加您的观点

Karthik Krishnamoorthy

Founder & CEO @ Intentify Digital Media (We're Hiring) ? Graphic Design ? LinkedIn Content Marketing ? [email protected]
举报内容
Use Containerization for Consistency: To ensure that policies are uniformly applied across various platforms, consider employing containerization strategies. Containers encapsulate an application and its dependencies, making it easier to enforce consistent security controls regardless of where the application runs. Leverage AI for Dynamic Policy Adjustments: Static policies may become outdated as platforms evolve. Utilizing AI-driven analytics tools can provide real-time insights into policy effectiveness and allow for dynamic adjustments, maintaining robust security postures across all platforms.

已翻译

赞

2 Define your desired state

Once you have a clear picture of your current state, you need to define your desired state. You should establish your security goals and objectives, based on your business needs, risk appetite, and stakeholder expectations. You should also align your security policies and standards with the relevant frameworks, standards, and guidelines, such as ISO 27001, NIST SP 800-53, or CIS Controls. These will provide you with a common language and a baseline for measuring your performance.

添加您的观点

Aby Rao
举报内容
When defining your future state, several factors warrant consideration: 1. It is imperative to convene regular meetings to evaluate the status of your business and technology teams regarding technology adoption. Deliberate upon any newly introduced security frameworks or updates within the preceding months.Ensure a minimum quarterly frequency for these meetings. 2. Within your organization, scrutinize the utilization of policies and standards, taking note of instances where they may not be adhered to or embraced, and contemplate potential revisions, particularly concerning standards. 3. Confirm the designation of both primary and secondary custodians for policies and standards.

已翻译

赞

3 Develop and update your policies and standards

Now that you have your desired state, you need to develop and update your policies and standards accordingly. You should follow a structured and documented process that involves the input and approval of key stakeholders, such as senior management, legal, IT, and business units. You should also ensure that your policies and standards are clear, concise, and consistent across platforms. You should avoid duplication, contradiction, and ambiguity that could lead to confusion or non-compliance.

添加您的观点

4 Communicate and train your staff

Developing and updating your policies and standards is not enough. You also need to communicate and train your staff on them. You should use various methods and channels, such as emails, newsletters, intranet, webinars, and workshops, to raise awareness and educate your staff on the purpose, scope, and requirements of your policies and standards. You should also test their knowledge and understanding, and provide feedback and recognition for compliance.

添加您的观点

5 Monitor and enforce your policies and standards

Finally, you need to monitor and enforce your policies and standards across platforms. You should use tools and techniques, such as audits, reviews, metrics, dashboards, and reports, to measure and evaluate your compliance level and performance. You should also use incentives and sanctions, such as rewards, penalties, or remediation actions, to reinforce positive behavior and deter negative behavior. You should also review and update your policies and standards regularly, to reflect changes in the business environment, technology, or regulations.

添加您的观点

Aby Rao
举报内容
I'd highly recommend tools for managing and maintaining policies and standards since they offer several significant advantages, to streamline processes, enhances efficiency, and ensures compliance. These are some of the reasons to utilize tools - 1. Lifecycle automation such as policy creation, distribution, tracking, and reporting. 2. Use central repository especially in medium to large organizations, thus making it easier to access, update, and retrieve documentation, improving overall visibility & version control. 3. Risk Assessment can leverage policies and standards to identify and track risks whether its application or 3rd party risk. 4. Tools can integrate with other security controls and systems ensuring enforcement of policies.

已翻译

赞

6 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?

添加您的观点

Information Security

+ 关注

给文章评分

我们借助人工智能创建了此文章。您认为这篇文章怎么样？

很棒不太好

举报此文章

查看全部

How do you keep security policies and standards consistent across platforms?

1

2

3

4

5

6

1 Assess your current state

2 Define your desired state

3 Develop and update your policies and standards

4 Communicate and train your staff

5 Monitor and enforce your policies and standards

6 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

更多Information Security相关文章

更多相关阅读内容

How do you keep security policies and standards consistent across platforms?

1

2

3

4

5

6

1 Assess your current state

2 Define your desired state

3 Develop and update your policies and standards

4 Communicate and train your staff

5 Monitor and enforce your policies and standards

6 Here’s what else to consider

Information Security

给文章评分

感谢您的反馈

查看其他技能