Does your organization have an information security policy? If so, is it up to date? Information security is more than installing a firewall. You need to know what you are protecting. That is what the information security policies can do. Policies are the guidelines that can be used to determine what security measures your organization should employ.

Writing successful information security policies also requires proper planning. Writing Information Security Policies is the only book of its kind that helps you in the process by explaining what you need to know in order to write your organization’s information security policies.

Few references will provide the answer of what a good policy document is and even fewer will help you write one. Although nearly every reference says that a good policy should be the basis for every successful security program, over 60 percent of companies do not have policies, or they have policies that are out of date. This book targets those who want to write effective security policies but are not sure how.