Organization security threats and controls

Solution Preview

Describe and differentiate between security policies, standards, and guidelines. Which of these three is more important to you and why?

In reference to security policies, these are predicated upon the creation the statements that are issued by higher administration officials that outline how information will be protected throughout the organization. Therefore, it's imperative for the policy to clearly and concisely define how the organization will appropriate roles throughout the organization in regard to security clearances and those who are given the responsibility to access and protect vital information that is pertinent to business operations. The organization must ensure that their policy is capable of providing a description of organizational controls that will be put in place for protecting the company's vital information.

In regard to standards, these are specific mandatory controls that occur on the lower level of organizational management but assist the organization in the enforcement of its information security policy while facilitating the ability of the organization to maintain security consistency throughout the entire organization. Standards consist of technological, hardware, and software standards that are predicated upon specific guidelines that outline the recommended use of these computer security controls to protect the business.

The use of guidelines represent recommendations for how the organization should practice certain functions that are used to provide security for the information technology throughout the organization. They support the standards that have been set by the organization and assist in filling any security gaps that may ...