IT Compliance
The dangers of using security policy templates in the enterprise
Reported by searchsecurity.techtarget.com
In the world of massive regulatory compliance requirements, we’ve all taken security policy templates and adopted…them into the organizational policy manual. It seems like a quick fix to thicken up the policy manual and check that regulatory box. It has become big business to sell stacks of prebuilt Payment Card Industry (PCI) Data Security Standard, HIPAA or National Institute of Standards and Technology-compliant policies online. There may have even been times when these templated policies introduced helpful new concepts or ideas. Security policy templates can be very useful, but only if they are properly vetted.