Executive Summary

Information Security Policies:

Information security policy is the policy to protect the information from any kind of threat and unauthorized use. Info Security policies ensure that the business continues within the secure environment to minimise the risk and increase the investment and trust of the customer. For information security, it is very important that it meets the requirements to manage the confidentiality, integrity, availability and privacy of the information in any organisation. It is also very important to ensure that the organisation has applicable rules, regulations and standards. Most of the times the policies are documented and reviewed for any changes in the future. The main objective of the policies is to limit the access of the information to different department regarding the business requirement. The special id is provided to the authorised person to access the information when needed. It will secure the information and keep an eye on the management. Monitoring and surveillance are also important to prevent a data breach. There should be compliance management that takes care of all policies regarding information security. It should also cover the continuous access of information for the departments. Developing perfect practices for secure and effective information security is also part of this policy. To ensure that the data is safe inside the organisation there should be a code of conduct policy for the staff. With the rapid growth in the information storing system the threats of unauthorised access are increasing therefore the policies are very important to secure the information in any organisation.

Treats and vulnerabilities:

In any organization, there is always a threat to information security. It is true that the use of technology has made our daily life so much easy but with the advancement of Artificial intelligence and cloud computing security threats tend to increase more day by day. Therefore, there is specific brief research to develop better and precise ways to keep the data and information save from unofficial and unauthorised used. We will talk about some potential threats in this report.