-
Book Overview & Buying
-
Table Of Contents
Executive's Cybersecurity Program Handbook
By :
This section will provide an overview of what PSPs are. All too often, I have seen policy documents that are 20 to 30 pages long. This is too much for a single document. A policy should not state what a technology is, nor should it state how it is implemented. There should be a separation between PCPs. This will make it easier for you, your team, and the organization to locate what you are looking for in a time of crisis or just normal day-to-day activities.
Policies are overarching documents that provide an overview of the control objective. They are high-level documents that establish governance with the intent of applying administrative, technical, and physical controls. Policies are high-level, allowing anyone to view the documents without giving away specific technologies or how they are implemented. This is an important distinction between policies and the rest of the documentation.
Policies are often confused with any written document used to...