Security Policy Development: The point is the journey not the destination.

Post date: Oct 29, 2012 4:04:59 PM

Every organization needs a security policy. Every security expert will tell you that as well. The only problem is that the point is not the security policy but the organizational and executive agreement about the importance of security and the process used to develop the policy.

If a full formed security policy that was exactly right for the organization was dropped on their doorstep with out any organizational effort to create it, the policy would fail and the security of the organization would be not different than it was without the security policy.