New to Gartner?
Register with us for FREE access to this research document.REGISTER NOW
Policy writing is a risk communication exercise that is frequently performed by people who lack the skills needed to create good security policy. Fortunately, the use of a few best practices for the planning and writing of policy can make a big difference in its effectiveness in reducing risk.
Table of Contents
Create a Process for Developing and Maintaining Your Policy
Use a Structured Approach to Support Flexibility
Don't Develop Your Policy in Isolation; Build Support by a Process of Engagement
Have Your Policy Drafted by Someone With Competence in Policy Development — the Rules Are Only as Strong as the Text That Expresses Them
- Writing for an International Audience
- Consider a User Guide
Make Sure That Your Policy Is Pragmatic by Testing It Out
- Create a Process for Developing and Maintaining Your Policy
Gartner Recommended Reading