课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

免费学习该课程！

今天就开通帐号，24,600 门业界名师课程任您挑！

Data security policies

Data security policies

课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

开始一个月试用 购买团队方案

Data security policies

“

- [Narrator] Policies form the foundation of any information security program and having strong data security policies is a critical component of your efforts to protect information. Data security policies and procedures play several important roles in an organization. No matter what specific issue a policy or procedure covers, it should meet several key criteria. First, policies provide the foundational authority for data security efforts, adding legitimacy to your work, and providing a hammer, if needed, to ensure compliance. They also offer clear expectations to everyone involved in data security by explaining what data must be protected and the controls that should be used to protect that data. They provide guidance on the appropriate paths to follow when requesting access to data for business purposes, and they offer an exception process for formally requesting policy exceptions when necessary to meet business requirements. Let's take a look at a few of the key issues that your…

内容