Information Security Management

FD


Developing an
information
security policy in
3/12/2019
organisation using
a case study
approach.
Information Security Management




Institution
LONDON METROPOLITAN UNIVERISTY

, Table of Contents
Abstract.................................................................................................................................................2
Introduction...........................................................................................................................................2
Aim and Objective.................................................................................................................................3
Literature review...................................................................................................................................3
Information security...........................................................................................................3
Threats to Information Security.........................................................................................4
............................................................................................................................................4
Information Security Policy...............................................................................................4
Requirement of Information Security Policy.....................................................................4
Research and Methodology...................................................................................................................5
Findings.................................................................................................................................................5
Review of Information Security Policy..............................................................................5
Password Management.......................................................................................................6
Use of Email......................................................................................................................6
Use of Internet....................................................................................................................6
............................................................................................................................................6
SNS.....................................................................................................................................7
In the institution's ISP, which nominates a particular department to operate on the social
networks of the institution (e.g., Twitter as well as Instagram) for media relations
purposes, the use of social networks sites is given very little attention. Discussion
should be included in the ISP on the proper use of these Social network sites with the
effects of use and possible security threats. The institution has its own application for
social media, and the ISP contains a particular policy document outlining the motive and
practical steps using this application. Computing through mobile....................................7
An ISP document entitled' Access Police ' discusses the need for safe institutional
systems and digital networks to manage mobile work operations. This policy should also
include a broad discussion on global cellular networks and public Wi-Fi
communications, such as what kinds of activities are allowed in such networks and
whether this is safe to log in to work with email through such a policy............................7
Handling Information.........................................................................................................7
In the present ISP papers, attention to data management is limited. A brief note on the
disposal of work information and records shows that this is permitted after a specified
period of time; this note is discovered in an ISP document entitled' Commitment Policy.'
However, the same note appears in the documents entitled' Leaving Sensitive Material