Define security policies

Design and execute a written set of rules and policies that have the aim of securing an organisation concerning constraints on behaviour between stakeholders, protective mechanical constraints and data-access constraints.

skill/competence

sector-specific

Define security policies is an essential skill of the following occupations:

ICT security consultant: ICT security consultants advise and implement solutions to control access to data and programs. They promote a safe exchange of information.

ICT disaster recovery analyst: ICT disaster recovery analysts develop, maintain, and implement ICT continuity and disaster recovery strategies and solutions. They support the technical teams, assess the risks, design and develop procedures, documentation and strategies for disaster recovery in order for business functions to continue and recover with a minimal loss of data. They also coordinate the system backups tests and validations.
ICT security manager: ICT security managers propose and implement necessary security updates. They advise, support, inform and provide training and security awareness and take direct action on all or part of a network or system.

Define security policies is optional for these occupations. This means knowing this skill may be an asset for career advancement if you are in one of these occupations.

Ethical hacker: Ethical hackers perform security vulnerability assessments and penetration tests in accordance with industry-accepted methods and protocols. They analyse systems for potential vulnerabilities that may result from improper system configuration, hardware or software flaws, or operational weaknesses.
ICT resilience manager: ICT resilience managers research, plan and develop models, policies, methods, techniques and tools that enhance an organisation’s cyber security, resilience and disaster recovery.
Operations manager: Operations managers plan, oversee and coordinate the daily operations of production of goods and provision of services. They also formulate and implement company policies and plan the use of human resources and materials.
Security manager: Security managers ensure security for people, such as customers and employees, and company’s assets either fixed, movable, machines, vehicles, and real state. They ensure safety and security by enforcing security policies, keeping track of different events, implementing security protocols, creating emergency response procedures, conducting security evaluations, and supervising security staff members.
 

References

1. Define security policies – ESCO