Developing Policies, Standards, and Guidelines Flashcards
1
Q
Policies - Definition
A
- Provides high-level guidance about expected behavior
- Outline consequences when not followed.
- Clear and concise.
2
Q
Standards - Definition
A
Tell people what is expected.
3
Q
Guidlines - Definition
A
- Provide specific advice on how to accomplish a given task or activity.
- How to accomplish Policies and Maintain standards.
- Minimum contents:
- Scope and Purpose.
- Roles and Responsibilities.
- Guideline Statements.
- Operational Considerations.
4
Q
Policy - Scope Statement
A
- Outlines what the policy intends to accomplish.
- Which documents, laws, and practices the policy addresses.
- Background info to help readers understand what the policy is about and how it applies to them.
5
Q
Policy - Overview Statement
A
- Goal of the policy.
- Why it’s important.
- How to comply.
6
Q
Policy - Statement
A
- Substance of the policy.
- Clear and unambigous as possible.
- Paragraph, bulleted lists, or checklists.
7
Q
Policy - Accountability Statement
A
- Who (position, not a name) is responsible for enforcing the policy.
- Who to contact if a problem is discovered.
- Indicate consequences of non-compliance.
8
Q
Policy - Exception Statement
A
- Specific guidance about the procedure or process that must be followed in order to deviate from the policy.
- Escalation contact.
9
Q
Standards - Scope and Purpose
A
- Explain or describe the intention.
10
Q
Standards - Roles and Responsibilities
A
- Who is responsible for implementing, monitoring, and maintaining the standard.
- Makes it clear who is responsible for accomplishing which tasks.
11
Q
Standards - Reference Documents
A
- Explains how the standard relates to the organizations different policies.
- Connects the standard to the underlying policies.
12
Q
Standard - Performance Criteria
A
- Outlines how to accomplish the task.
- Relevant baseline and technology standards.
- Baselines - minimum or starting point for the standard.
- Technology standard - info about the platforms and technology.
13
Q
Standards - Maintenance and Admin Requirements
A
- Outline what is required to manage and administer the systems or networks.
14
Q
Guidlines - Scope and Purpose
A
1.
15
Q
Guidelines - Roles and Responsibilities
A
- Which individuals or departments are responsible for accomplishing specific tasks.