Comments on: Security Policy Development http://blogs.capella.edu/iascommunity/2009/05/08/security-policy-development/ Just another Blogs.capella.edu weblog Thu, 12 Nov 2009 14:55:11 -0800 http://wordpress.org/?v=2.8.4 hourly 1 By: Michael Pisto http://blogs.capella.edu/iascommunity/2009/05/08/security-policy-development/comment-page-1/#comment-35 Michael Pisto Mon, 18 May 2009 00:59:53 +0000 http://blogs.capella.edu/iascommunity/?p=148#comment-35 Hey Steve, Just wanted to let you know that I have read your post and appreciate the extra information on policy layouts. Thanks Mike Hey Steve,

Just wanted to let you know that I have read your post and appreciate the extra information on policy layouts.

Thanks
Mike

]]> By: Derrick Jackson http://blogs.capella.edu/iascommunity/2009/05/08/security-policy-development/comment-page-1/#comment-34 Derrick Jackson Sun, 17 May 2009 08:46:44 +0000 http://blogs.capella.edu/iascommunity/?p=148#comment-34 This was a very good post and the outline of a security policy was very informative. As a current Capella Learner, I'm sure this information will come in handy and even more so as I move in the business sector. This was a very good post and the outline of a security policy was very informative. As a current Capella Learner, I’m sure this information will come in handy and even more so as I move in the business sector.

]]> By: Charlie Kiriakou http://blogs.capella.edu/iascommunity/2009/05/08/security-policy-development/comment-page-1/#comment-33 Charlie Kiriakou Sun, 17 May 2009 00:02:15 +0000 http://blogs.capella.edu/iascommunity/?p=148#comment-33 Dr. Brown, Absolutely agree with your statements about security policies. All organizations must have well written, clear and concise informationa security policies. The Department of Defense (DoD) has several extensive policies, or DoD Directives, that specifically deal with Information Assurance (DODD 8500 series). This policy, and associated implementing DoD Instructions, are quite extensive and exhaustive, and are based on public law and other federal guidelines. However, organizations of any size, even small businesses, should have information security policies. Employees must know the rules and their responsibilities when it pertains to safeguarding information they process in their daily routines. There's too much at risk in today's cyber world to not put in place company policies to protect information and hold individuals accountable for mishandling information. Charlie Dr. Brown,

Absolutely agree with your statements about security policies. All organizations must have well written, clear and concise informationa security policies. The Department of Defense (DoD) has several extensive policies, or DoD Directives, that specifically deal with Information Assurance (DODD 8500 series). This policy, and associated implementing DoD Instructions, are quite extensive and exhaustive, and are based on public law and other federal guidelines.

However, organizations of any size, even small businesses, should have information security policies. Employees must know the rules and their responsibilities when it pertains to safeguarding information they process in their daily routines. There’s too much at risk in today’s cyber world to not put in place company policies to protect information and hold individuals accountable for mishandling information.

Charlie

]]>