Policy Services

The Challenge

Policies provide the cornerstone of security by setting a baseline from which to operate. Policies set expectations for personnel, drive compliance with regulations and help manage business relationships.  

Policies are put in to place to ensure that compliances are met at that customers receive the best level of service possible. 

The Service

The Blue Cube Policy Definition service provides an investigation of requirements for information security, associated priorities and business objectives to create a custom security policy to clearly demonstrate management's commitment to an enterprise security program to employees, customers, partners, and shareholders.

Blue Cube consultant team works with staff to develop a detailed work plan and can meet on an ongoing basis to help ensure all work is performed to a satisfactory level. To ensure the policy meets business needs, Blue Cube Consultants draw from past experience and best practices selected from industry standards for commercial environments in areas such as organisation, personnel, physical controls, asset clarification and control, and network and computer management.

With Blue Cube's Policy Definition Service, our Consultants will interview key business and IT managers to develop a corporate security policy that will contain, at a minimum:

Definition of information security with a clear statement of management's intentions and expectations of security processes

Explanation of security requirements, including:

• Compliance with legislative and contractual requirements
• Security education, virus prevention and detection, and business continuity planning
• Incident response requirements and processes
• Acceptable uses and management procedures
• Description of security program participant roles and responsibilities
• Process for maintaining the policy document and established security programs

Previous Page