An IT security policy framework is the foundation of an organization's information security program.

An IT security policy framework is the foundation of an organization's information security program.  The framework consists of a library of documents.  A policy framework is much more tan "just" a collection of documents.  Organizations use these documents to build processes, determine acceptable technologies, and lay the foundation for enforcement.

Respond

In a minimum of 450 words, write an APA formatted paper addressing the following questions:

1. What are some of the  best practices for IT Security policy framework creation?

2. Which information systems security factors should you consider when creating your IT security policy framework?