INFORMATION SECURITY AUDIT POLICY

Information Security Audit Policy

Table of Contents
Table of Contents. 2
Document Control 3
Background. 4
Purpose. 4
Scope. 4
Policy. 4
Enforcement 4


Document Control

DOCUMENT NAME
Information Security Audit Policy

AUTHORISATION

Reviewed By
Authorised By
Name : Manish Jaiswal
Name : Ganesh Raj
Signature :
Signature :

DISTRIBUTION LIST: Audit Team.

VERSION HISTORY
VERSION
DATE
PREPARED BY
CHANGES & REASONS FOR CHANGE
1.0
Sep 2002
Rangarajan
Initial Formulation
1.1
Oct 2003
Sanjay Joglekar
Yearly Review and Change
1.2
Sep 2004
Manish Jaiswal
Changed the name of the reviewer. Yearly Review
1.3
Oct 2005
Manish Jaiswal
Yearly Review
1.4
Mar 2006
Manish Jaiswal
Change the name of the approver


Background
1. Information security is achieved though implementing a framework of safeguards that are technical, administrative or managerial. The effective and efficient functioning of all the safeguards is important to achieve security of information in the Company. By corollary, vulnerability in one part of the organisation may lead to a significant risk in another part of the organisation. Hence, periodic assessments to ensure the effectiveness of security controls are an important part of the information security management system at P&O Ports.
Purpose
2. This policy defines the process of the periodic internal audits and independent assessment by outside specialist agencies for information security at P&O Ports.
Scope
3. This policy applies to all business critical information and information systems in P&O Ports.
Policy
Internal Audits
4. A yearly internal audit will be taken up as per the audit program issued by the Chief Information Security Officer (CISO).
5. The Management Information Security Forum (MISF) will identify suitable objectives for the internal audit as per the policies and in light of any reported incidents or risk perceptions. These would include the assessment of compliance to information security policies, procedures and standards in the identified areas.
6. The audit teams for the internal audits will be identified to ensure that objectivity of the audits are maintained .
7. The audit teams will obtain objective evidence of their findings and submit its report to the MISF.
8. CISO will issue instructions on the closure actions for the audit findings along with the responsibilities and timelines.
9. The concerned personnel as per the stipulated time will submit a formal closure report.
Independent Information Security Audits
10. A periodic information security assessment by a competent third party will be mandated by the MISF at least once in two years.
11. The third party mandated will report to the MISF for audit objectives and findings.
Enforcement
12. The audit and closure actions reports of the internal audits and third party audits will be preserved for a period of three years.

Comentários

Postar um comentário

Postagens mais visitadas deste blog

ORIGEM DA HOMILÉTICA E DA RETÓRICA

Imagem
A homilética propriamente dita, nasceu muito cedo na história humana, embora não como termo designativo homiletikos (arte de pregar sermão) e homilia (arte de falar elegantemente na oratória eclesiástica), mas como oratória pictográfica (sistema primitivo de escrita no qual as idéias são expressas por meio de desenhos das coisas ou figuras simbólicas). Ela surgiu na Mesopotâmia há mais de 3000 anos a.C., para auxiliar à necessidade que os sacerdotes tinham de prestar contas dos recebimentos e gastos às corporações a que pertenciam e faziam suas prédicas em defesa da existência miraculosa dos deuses do paganismo. O sistema sumeriano viria a ser o protótipo (primeiro tipo ou exemplo) de outros importantes sistemas de escrita, como o egípcio, por exemplo. a)  Como termo designativo Entretanto, homilética como termo designativo com suas técnicas, sistematização e adaptação às habilidades humanas, nasceu entre os gregos com o nome de retórica. Depois foi adaptada no mundo romano co
Leia mais

LEONARD WOOLEY , O ARQUEÓLOGO

Sir Charles Leonard Woolley 1880-1960 Leonard Woolley was born in London, the son of a clergyman. Often as a child he thought about following in his father�s footsteps, however, the call of archeology lured him away. He graduated from University of Oxford and went on to become a great archeologist. His most notable work was the information he gathered about the Sumerians from the excavations at Ur of the Chaldees. Woolley first started working as Assistant Keeper of the Ashmolean Museum at Oxford from 1905 until 1907. He worked with T.E. Lawrence from 1912 to 1914 and later in 1919 clearing Carchemish, the Hittite city, and in Sinai. Woolley also worked in Tell el Amarna with the Egypt Exploration Society. From 1922 through 1934 he was in charge of the joint venture between the British Museum and the University of Pennsylvania excavating at Ur of the Chaldees where he made his greatest discover The Ur of Chaldees, found in present-day Iraq, was the royal burial site of many Mesopotam
Leia mais

PENTATEUCO E HIPÓTESE DOCUMENTÁRIA

Rev. Ewerton Barcelos Tokashiki 1. Título Geralmente esta seção do AT é comumente conhecido como Toráh (Lei). O substantivo toráh se deriva da raiz yarah, “lançar” ou “projetar”, e significa orientação, lei, instrução. Edward J. Young observa que como designação dos cinco primeiros livros da Bíblia, esse termo é empregado em sentido mais restrito para destacar o elemento legal que forma tão grande porção desses livros. Esse emprego do termo, porém, não exclui as seções históricas ou de narrativa; antes, inclui-as, visto que formam o segundo plano ou arcabouço apropriado para a legislação.[1] A palavra “Pentateuco” é uma derivação de duas palavras gregas “pente” (cinco) e “teuchos” (volume). Seu primeiro uso se encontra, talvez, nos escritos de Orígenes, a respeito de Jo 4:25, “do Pentateuco de Moisés”. No AT o Pentateuco é chamado de: 1. Lei: Js 8:34; Ed 10:3; Ne 8:2,7,14; 10:3
Leia mais