A solid information security program is built on a pyramid of documentation. At the top, you have high-level policies that state management’s intent. Below that are standards, which define mandatory rules. At the base, you have detailed, step-by-step procedures that tell employees exactly how to perform specific tasks. Records provide the evidence that …
The Missing Link in your Documentation
Discover the difference between processes and procedures.
