Developing Security Policies: Charting an Obstacle Course

Author: Rosemary Sumajit Published March 26, 2011 from SANS

This paper discusses the issues faced by those at my educational institution in trying to develop security policies. Some highlights include battling the myth of security, deciphering the meaning of security, receiving mixed signals about the importance of security, trying to keep it simple, trying to get it done quickly and trying to prevent it from failing.