Formulating a Security Policy › Sample Security Policy

Sample Security Policy

There is a sample of an application level policy in the Appendix. This policy was submitted by a CA Top Secret customer as a suggested base for your security policy.

No matter which form the policy takes, the critical point in the security implementation is that direction be set and communicated before implementation begins. Without this direction, security implementation is often aimless and does not have much hope of real success. The data processing community must be made to understand that management is taking security seriously and expects them to do the same.