Security Policies and Procedures

Course overview

Course outline

1. 1Day 1: Introduction to Security Policies and Procedures

   • What are security policies?
   • What are security procedures?
   • Why do we need policies in our organizations?
   • How policies affect your work and every-day routines
   • Understanding the connection between policies and the law
   • The importance of policies and procedures in security
   • Different types of policies in the workplace
   • 3 types of security policies
   • What should a security policy contain?
   • Assignment instruction
   • Policies and the law
   • Wants, needs and benefits of policies and procedures
2. 2Day 2: The Principles of Policies and Procedures

   • Setting a security policy within an organization
   • 5 components or elements of a security policy
   • Differences between policies and procedures
   • Security awareness
   • Roles and responsibilities when creating policies
   • 3 types of security controls
   • Relationship between policy and management
   • Policy statements
   • Top-down security
   • Bottom-up security
   • Security standards
   • Codes of Security behavior and ethics
3. 3Day 3: Management Controls and Written Documentation (Part 1)

   • Security administration
   • Assignment instructions
   • Reporting procedure
   • Physical control policies
   • Technical control policies
   • Structuring your security policy
   • Developing a security strategy
4. 4Day 4: Management Controls and Written Documentation (Part 2)

   • Rational for security strategy
   • Consequences of poor policy implementation
   • Establishing effective procedures for success
   • Implementation of security procedures
   • Managing security procedures
   • Measuring procedures for assessing performance
   • Security procedure typology
5. 5Day 5: Creating Effective Policies for your Organization

   • Developing a suitable security policy for an organization
   • Developing and writing a policy statement for your organization
   • Matching security procedures to the policies
   • Creating Assignment Instructions for your organization
   • Developing a written assignment instruction for an organization
   • Creating a security plan with a list of suitable policies and procedures for your organization