From the course: Cert Prep: ISC2 Certified in Cybersecurity (CC)
Join today to access over 23,200 courses taught by industry experts.
Best practice security policies
From the course: Cert Prep: ISC2 Certified in Cybersecurity (CC)
Best practice security policies
- Now that you understand the different types of documents that we create as part of the security policy framework, let's spend some time discussing the content of those policies. Every organization is going to need a different set of security policies, but there are some common themes found in most organizations. First, most organizations have an acceptable use policy, or AUP. The purpose of the AUP is to describe what users are permitted to do with the organization's technology assets, and what's prohibited. For example, AUPs often address whether personal use of computers and systems is permitted, and how much personal use is considered acceptable. The AUP also normally contains language that tells users that they may not attempt to access information or systems that they aren't authorized to access and the consequences that will occur if they violate the policy. Data handling policies describe the security…
Download courses and learn on the go
Watch courses on your mobile device without an internet connection. Download courses using your iOS or Android LinkedIn Learning app.