Online Legal…

Information security policies v IT policies v HR policies

We frequently get asked by companies to draft or review their policies relating to inter-alia e-mail and Internet use, the use of company owned computers, access controls to the company’s network and the use of memory sticks, CD writers and other portable storage media media onto which sensitive company information can be recorded and transported easily outside the company. These types of policies are loosely referred to as “information security policies”.

They are different to other types of policies which are typically found within an organization, such as HR Policies, Finance Policies and “IT Policies”.

“IT Policies” are closely related to “information security policies”, but they are a different beast altogether.

At a high level, information security policies focus on managing and protecting data, whereas IT Policies generally tend to focus on the supporting processes (e.g. procurement policies) and supporting systems.

Similar:

• Types of Policies on Offer
• Does Your Organization Need Information Security Policies?
• Infosec versus other concepts (e.g hacking)
• Computer Usage Policy
• Telecommuting Policy