Information security policies for governmental organisations, the minimum criteria

Abstract

Recent technology advancement has resulted in an era where many organisations become more and more comfortable to use computer systems to process their information. Intruders are making it their mission to break into these computer systems and access valuable information in an unauthorised way. Information security policies are seen as not only a counterproposal, but also a solution to information security effectiveness. However, a key issue impacting information security policies is what should be included in these policies. This study makes an attempt to design a Comprehensive Information Security Policy (CISP) to serve as basis for organisations when designing their own information security policies, based on a public survey on IT related governmental information security policies.