Cybersecurity Tip of The Day #4

Policies that go unenforced quickly become nothing more than suggestions

Organizations write security policies for a variety of reasons. At times the creation of a policy is due to regulatory law, and others are created based on best-practice or changing technology and business landscape. Regardless of the driver, a policy that is not socialized to the workforce and enforced when violated quickly becomes a suggestion to most. It's extremely important when publishing new documentation to ensure that the organization is ready, willing and able to comply with its own policy. Utilize a committee approach and gather stakeholder feedback on drafts to validate that the contents of a policy are aligned with the business and well-supported.

#cybersecurity #policy