One Article Review
| Source |  NoticeBored |
|---|---|
| Identifiant | 1779398 |
| Date de publication | 2020-03-12 15:17:34 (vue: 2020-06-29 11:00:30) |
| Titre | NBlog March 8 - meshy policies [UPDATED] |
| Texte |  I'm reviewing and revising our information security policy templates, again. At the moment I'm systematically compiling a cross-reference matrix in Excel showing how each of the 65 policies relates to others in the set - quite a laborious job but it will result in greater consistency. The objective is to make the policies knit together coherently, without significant overlaps or gaps in coverage - less mess, more mesh.All our policies include a reference section noting other relevant policies, procedures, guidelines etc. but only the main ones: the information risk management policy, for instance, is relevant to all the others but there's no point listing it as a reference in all of them, nor listing all of them in it.I have shortened the titles of a few policies for readability, and need to check/update the formatting then generate new screenshots for the website. Once that is all done, I will be checking coverage: a couple of policies are similar enough that they might perhaps be combined, and I'm always on the lookout for gaps that need plugging.In all of this, it helps enormously that I wrote them all in the first place, and have maintained them all through the NoticeBored monthly updates. Organisational policies usually accumulate over time from a variety of sources and authors, with different writing styles and mind-sets. Conflicts and holes are not uncommon, creating problems for awareness and compliance. Hot issues tend to have current, up-to-date policies, whereas policies covering longstanding aspects tend to go stale, unless someone takes the time to review and update the entire suite as I am doing now. Even something as simple as using a common MS Word template with styles for headings and text makes a huge difference to the readability and consistency, but the template itself has evolved over the years I've been doing this, and is changing again now. It takes concentration to work systematically through the whole suite, updating them to the same standard.The end result is worth it though. The policy suite is already a polished, professional product at a good price (a fraction of the cost of developing this much content from scratch). It sells well and I'm proud of it! We are using it to develop custom, branded policies for clients and would love to do the same for you, so if your infosec policies are looking a bit shabby, messy, the worse for wear, |
| Envoyé | Oui |
| Condensat | i let accumulate again all already always are aspects authors avoiding awareness back been bit branded but changing check/update checking clients coherently com combined common compiling compliance concentration conflicts consistency content cost couple coverage coverage: covering creating cross current custom date develop developing difference different doing done each end enormously enough entire etc even evolved excel first formatting forward fraction from gaps generate get going good greater guidelines has have haven headings help helps holes hot how huge include individual information infosec instance issues itself job just keen knit laborious less list listing longstanding looking lookout love main maintain maintained make makes management march matrix mesh meshy mess messy might mind moment monthly more much nblog need new nor not noticebored noting now objective once ones: only organisational other others over overlaps perhaps place plugging point policies policy polished price problems procedures process product professional proud ps quite readability reference relates relevant result review reviewing revising risk sale same scratch screenshots secaware section security sells set sets shabby shortened showing significant similar simple site someone something sources stale standard styles suite systematically takes talk template templates tend text them then there things though through time titles together uncommon unless update updated updates updating using usually variety wear website well when whereas whole will without word work worse worth would writing wrote www years yet your |
| Tags | |
| Stories | |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.