From the course: CCSP Cert Prep: 6 Legal, Risk, and Compliance Audio Review

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Security policies

Security policies

From the course: CCSP Cert Prep: 6 Legal, Risk, and Compliance Audio Review

Start my 1-month free trial

Security policies

- [Instructor] Security policies serve as the building blocks for cloud security programs. In chapter five of the video course, I covered the basics of security policies. The security policy framework has four elements. At the highest level, security policies are written to express the security expectations of the organization. Policies lead to standards, which get into more technical and operational detail on how security activities will be carried out. Guidelines are where security professionals provide advice to the rest of the organization, including best practices for cyber security. And procedures are step-by-step instructions that employees may follow when performing a specific security task. Compliance with the policies and standards is always mandatory. Guidelines are always optional advice. Procedures may be mandatory or optional depending upon the organization and the specific circumstances. You might have a…

Contents