Formulating a Security Policy › Primary Elements of a Security Policy › Security Administration

Security Administration

The central security administration area is the focal point of the security effort, with a minimum objective of giving all users an ultimate point of reference in security matters.

Consider the following responsibilities for this area:

• To develop the standard security procedures used within the corporate environment.
• To document the security controls available, and communicate them to all appropriate security system users.
• To estimate the risks and exposures within the corporate environment.
• To administer security within the guidelines of the policy.
• To log and report violations to the appropriate individuals.
• To assist in the development of security designs for all user requirements.
• To educate all users in corporate security policy, and in the use and features of the security software.
• To support and monitor decentralized administration where decentralization is required.