Security Policy: Difference between revisions

:1. be consistent with the information security policy;

:2. be measurable (if practicable);

:3. take into account applicable information security requirements, and results from risk assessment and risk treatment;

:4. be communicated; and

:5. be updated as appropriate.

:6. what will be done;

:7. what resources will be required;

:8. who will be responsible;

:9. when it will be completed; and

:10. how the results will be evaluated.