Information Security Planning

Question 1

Levels

Answer 1

*Strategic Plans -long term planning, futuristic vision
*Tactical Plans -medium-term planning and vision
Operational Plans - short term

Question 2

Policies, Standards, Guidelines and Procedures

Answer 2

• Policies
  Sanctioned by the Management (WHY, WHEN)
• Standards
  Detailed minimum specifications for compliance (WHAT)
• Guidelines
  Recommendations for compliance (FYI)
• Procedures
  Step-by-step compliance instructions (HOW, WHO)