contestada

What are the four components of a complete organizational security policy and their basic purpose?

1. Purpose – Why do we need it?
2. Scope – How will we do it?
3. Responsibilities – Who will oversee what?
4. Compliance – Make sure everyone conforms

Respuesta :

nechukwu

Answer:

The components are Purpose, Scope, Responsibilities and Compliance.

Explanation:

The Organizational Security Policy is a document stating the basic framework of its security program. OSP are policies that help prevent inconsistencies in organizational security by forming the basis for detailed standards, guidelines, and procedures. They also serve as tools to inform employees about appropriate activities and restrictions required for regulatory compliance and make clear what the management’s expectations of employee involvement in protecting information assets are.

The four components of organizational security policy and their purpose are:

1. PURPOSE - This component of a security policy states the objectives of the program, such as:

Improved recovery times

Reduced costs or downtime due to loss of data

Reduction in errors for both system changes and operational activities

Regulatory compliance

Management of overall confidentiality, integrity, and availability.

2. SCOPE - This component codifies whom and what are covered by the policy. Coverage may include:

Facilities

Lines of business

Employees or departments

Technology

Processes

3. RESPONSIBILITIES - Individuals and units in the organization are assigned responsibilities for the implementation and management of the policy are assigned in this section.

3. COMPLIANCE - This component provides for the policy’s enforcement. It describes oversight activities and disciplinary considerations clearly. But the contents.

Martebi

The components of organizational security policy are:

1. Purpose

2. Scope

3. Responsibilities

4. Compliance

What is organization security policy?

An organizational security policy is known to be some laid down set of rules or methods that are used or that is imposed by a firm on its operations. This is done with the aim to protect its sensitive data.

The Information security objectives is one that deals with Confidentiality that is only few people with authorization can or should access data and other information assets.

Learn more about organizational security policy from

https://brainly.com/question/5673688

Otras preguntas