Informal Security Policy: An informal security policy consists of unwritten rules or common practices adopted by an organization to safeguard its information and systems. While not formally documented, these practices are understood and followed by members of the organization. Such policies are more common in less regulated or smaller environments where formal policies have not been established.
Categories: CC D1: Security Principles | CCSP D6: Legal - Risk and Compliance | CISM D1: Information Security governance | CISSP D1: Security and Risk Management | Security+ D5: Security Program Management and Oversight | SSCP D1: Security Concepts and Practices
« Back to Glossary Index 
