Regresar

Security and privacy policies: Shape and background

Abstract:

Organizations handle increasingly larger quantities of information in technological formats, hence the indispensability of increasingly more rigorous and comprehensive security controls. The technological process may work as a threat catalyst, but is not by itself sufficient to ensure the effective security of information. Among other security measures, policies assume a central role in literature. This study aims to present different approaches on Security and Privacy Policies with regard to the elements and features they should include according to different authors. Based on that study, and in order to assess which elements and features are taken into account in the drafting of a Security and Privacy Policy in real organizations, a survey was conducted comparing seven organizations which are different as far as their activity and geographical location are concerned. The results are discussed in light of the literature and future works are identify aiming to contribute to a better understanding of the components and features that a security policy must observe.