Tuesday, June 05, 2007

Policies Manage Your Risks

Policies help organizations manage risks. By reviewing business requirements and anticipated future growth plans, organizations can identify and prepare policies that are aligned with the organization's goals and objectives.

Policies often consist of the following:

  • Policy – the rules and requirements for risk management and continuing business operations.

  • Standards – detailed networking and security technologies for protecting information systems.

  • Guidelines – system or topic related recommendations and best practices.

  • Procedures – details to implement standards and guidelines, guides for installing software, securing facilities, documenting security breaches, etc.

In some instances, policies can conflict with each other. In these circumstances, a steering committee can address policy conflicts and identify appropriate compromises and alternative solutions.

If your organization lacks policies, policy templates provide a jump start and help you manage your risks. More information on policy templates is available at Altius IT.

Labels: , ,