Describe the purpose of policy management and stress that they are living documents that must be managed and nurtured, as they constantly change and grow. These documents must be properly disseminated and managed.
Assess situations where special considerations should be made. Give examples of this being organizations undergoing mergers, takeovers, and partnerships.
Relate that viable security policies must have a responsible manager, a schedule of reviews, a method for making recommendations for reviews, and a policy issuance and revision date.