Safety and Security Policies -

Running head: QUESTION 0
Security and Safety Policies
MARCH 22, 2020
STUDENT DETAILS:

QUESTION 1
The organizational security policy is considered as set of the processes as well as rules.
The organisations impose organizational security policy on the operations to secure sensitive and
confidential information. It is essential for the organisations to adopt effective safety and security
policies. The information security policy and incident response policy (IR policy) are considered
as best safety and security policies.
Further, the main reason of selection of information security policy is that this policy is
high-level security policy (Weimer & Vining, 2017). The information security policy covers
great number of the security controls. The information security policy ensures that the workers,
who utilise IT assets in breadth of a company or the network of company, comply with the
mentions rules as well as regulations. Thus, this policy is important for the company because it
makes the employees responsible towards corporate data along with information technology
assets. In addition, the incident response (IR) policy is considered as organized method to how
an entity would manage the incidents and remediate the impacts to functions of company. The
organisation should use incident response policy for ensuring the safety as well as security. It can
say that the main purpose of the incident response policy is to define the procedure of handling
the incident in relation of restricting the damages to clients, functions of company and image of
company. It is also evident that this policy reduces the recovery time along with cost (Safa, Von
Solms & Furnell, 2016)

QUESTION 2
References
Safa, N. S., Von Solms, R., & Furnell, S. (2016). Information security policy compliance model
in organizations. computers & security, 56, 70-82.
Weimer, D. L., & Vining, A. R. (2017). Policy analysis: Concepts and practice. USA:Taylor &
Francis.