INFORMATION SECURITY POLICY - A DEVELOPMENT GUIDE
Luiz Carlos Costa Neto, Luiz Gustavo de Castro Carlos, Costa Neto · 2013
A security policy should fulfill many purposes. It should: protect people and information; set the rules for expected behavior by users, sys‐ tem administrators, management, and security personnel; authorize security personnel to monitor, probe, and investigate; define and au‐ thorize the consequences of violation; define the company consensus baseline stance on se curity; help minimize risk; and help track com‐ pliance with regulations and legislation.