Information Security Policy Compliance Considerations

Fong N.; Bayona-Oré S. · RISTI - Revista Iberica de Sistemas e Tecnologias de Informacao (2022)

Resumen

Information security management to protect an organization’s information assets is a critical activity in organizations. The Information Security Policy is the document that contains the organization’s purposes and objectives in relation to Information Security. The compliance of workers with Information Security Policy has been of interest to researchers who have proposed practices related to Top Management Support, Information Security Policy Elaboration, Communication, Training and Culture. This article presents the practices identified as a result of the literature review of scientific articles on Information Security Policy compliance. The implementation of the identified practices supports the compliance with the Information Security Policy.

Instituciones: Universidad Nacional Mayor de San Marcos; Universidad Autónoma del Perú