Data Security Policy - How Detailed Should it Be?
Frequently I see data security approaches written in a lot of detail, attempting to cover everything from key goals to the number of mathematical digits a secret word that ought to contain. The main issue with information security policy is that they contain at least 50 pages, and - nobody is truly treating them in a serious way. They generally wind up filling in as counterfeit records whose sole design is to fulfill the reviewer. In any case, why are such approaches very hard to carry out? Since they are excessively aggressive - they attempt to cover such a large number of issues, and are expected for a wide circle of individuals. To this end ISO 27001, the main data security standard, characterizes various degrees of data security arrangements: Undeniable level approaches, like the Information Security Management System Policy - such significant level arrangements for the most part characterize key expectation, goals and so on. Nitty gritty strategies - this sort of st...