information securtiy publiched jointly by

ISO27001 is a list of potenital security controls that can be used

•The National institute of standards and technology (NIST) is a regularity federal agency.

publishes FIPS, federal information processing standards after be approved.

is a set of comprehensive requirements for enhancing security of credit and debit card payment.

designed to ensure the selection of adequate and appropriate security controls is in place.

•Aims of IT security policies:

The success of information security program depends on

•Procedures s are least expensive means of control & often the most difficult to implement

For policies to be effective, they must be

•Policies requirements should not be reviewed regularly for  modification and maintenance.