Security Management Practices

The organization’s users are a critical component in achieving and maintaining information assurance. The best information security policy will sit dormant on a shelf unless the security manager has an effective, enterprisewide, ongoing security awareness campaign. Training experts agree that a well-developed communication plan can spell the difference between the success or failure of a security program.