Elements of a policy

This includes the statement of commitment, the purpose, … the performance measures and the reporting requirements. … Let's take a look at each of these elements. … This essentially states under whose authority this document … is being published and the level of executive commitment … that's being placed behind it. … It's often common for this policy to be released … by somebody in the C-suite, … such as the chief executive officer, … or the chief operating officer. … By having the statement of commitment, … it lets employees know that the top management cares … The next element of the policy is purpose. … why you're writing the policy to begin with. … For example, your purpose might state, this document defines … the policy for addressing security incidents … through appropriate and organized … incident response procedures. … Next, we have the objectives. … The objectives will define what we're trying to achieve … by implementing this policy. … This goes a bit deeper into your why, than the purpose did. …