Importance of Developing a Strategic Security Policy for Woolworths

Report Writing
1

Table of Contents
INTRODUCTION...........................................................................................................................3
Background of the company........................................................................................................3
Strategic security policy...............................................................................................................3
CONCLUSION................................................................................................................................8
REFERENCES..............................................................................................................................10
2

INTRODUCTION
Information security refers a procedure of maintaining integrity, confidentiality of
company'' informations or data in its various forms (Safa, Von Solms and Furnell, 2016). This
study is based on Woolworths which is an Australian chain of supermarkets which operates
approximate 995 stores across Australia with having approximate of 115,000 employees which is
the key of its success. Its headquarter is in the New South Wales, Australia. This study is going
to show importance of developing a strategic security policy or information security which helps
an organization in protecting their confidential informations. Further, it will discuss potential
threats or problems which an organization face if it does not implement an effective security
policy or information security.
Background of the company
Woolworth is an Australian chain supermarkets which was founded in the year of 1924
by Woolworth group. This supermarket is mainly popular for its qualitative products which
include: fruits, vegetables, meat, packaged food etc. Rather, all these food products it offers
household products, health and beauty products, stationeries etc. It is stated that it has around
995 Woolworth supermarkets and around 43 Woolworth metro convenience store. It provides
qualitative and unique features of products which has made it able to increase consumers interest
in it. It has also established branches across Australia and is providing facility to its customers of
online shopping which save their time and cost as well. In the context of security policy, it is
stated that this supermarket own systems and networks to which access is being given to users. It
also complies with all requirements of legislations (Acceptable Use of Information System
Policy, 2013). If it finds any type of illegal activity and have suspect ion they it immediately
informs to the appropriate external authority. It knows that if it does not comply with all
requirements of legislations then it may result in disciplinary actions or any lawsuit. It provides
training to its all employees and make them aware about the importance of following guidelines
relevant to the security and safety.
Strategic security policy
A security strategy refers a document that consists of all informations and steps required
to be followed by the company in order to identify and manage risks as well as security.
3

Developing security strategy is an important and effective procedure in which company consists
all steps, initial assessment, planning, implementation and continuous monitoring which can help
them out in preventing themselves and others against any type of accident (Tan and et.al., 2017).
In the context of Woolworth limited it can be said that, the primary aim of this retailer of
developing strategic security policy is to educate employees on their responsibility to protect
their company's confidentiality and integrity of informations. It is important for Woolworths to
plan and develop an effective strategic security policy for prioritizing informations assurance and
security initiatives with the main aim to increase protection of informations.
Strategy, planning and development
For making an effective strategy and planning about security policy, management and
leaders plays an important role. So, it is important for company to make managers and leaders
able to take an active participation in planning process. Cyber security and assurance of
informations integrated functions which require team working and collaboration of leaders and
manager to communicate it to all team members and give clear direction (Larson, E.V., 2019).
For developing policy of security, company also requires to follow some steps in a
sequence such as: determining current state, performing gap analysis, determining relevant
resources, evaluation of control choices, designing controls with relevant resources, designing
monitoring controls and developing project management plan. There are some security
objectives which Woolworths want to accomplish by developing and implementing policy. Some
strategic security objectives include:
 Preventing hackers gaining unauthorized access to internal servers.
 To make sure that effective controls are in place in order to reduce risks of claim under
privacy legislations.
4