Information Security Polices

Users who do not care about information security end up losing their important and confidential information. This is because lack of proper information security exposes information to unwanted interference. Puhakainen (2006) believes that information technology users should be educated about the critical aspects of information security and be helped to access such in order to ensure data protection. Implementing strong information security prevents data from hacking and other crimes related to information technology.

2.4 Importance of Information Security Polices

Information security policies constitute high-level set of security related requirements that organizations use to set the ground rules for information security within their premises.

In the connection, information security policies are concerned with protecting information and data assets of the organization. Lee (2014) describes policies as guides used to ensure protection and data integrity with the system application, network, computer facilities and manuals (Saint-Germain, 2005). Currently, information and all related processes are closely integrated in order to increase relevance. Achievement of organizational goals is determined by the extent to which systems integration is successful in organizations (Barbara et al., 2008). Puhakainen (2006), however, argues that achievement of strategic goals should be based on confidentiality, integrity and availability of

The National Assurance Policy, a document dated March 20, 2014 describes the necessity of information security policy and other related issues. In regard to information exchange, the document explains that it is vital to ensure that all sent or received information is free of virus (ictqatar, 2014). However, the document policy almost explains all related issues of information security for both personal and business safety. The developers of the security policy intended to ensure that organizations achieve high levels of information security.

Information security policy is crucial to information safety. Lack of a security policy is an evidence of lack of direction and amounts to anarchy. The areas that should be touched by security policies include business and operations. The senior management is required to back securities policies and ensure it is succinctly written in order to avoid marginalization of information security efforts (Puhakainen, 2006). If senior management fails to openly support the policy, implementation may be difficult because it is the management that provides funds and guidelines for further