Security rules won’t protect the organisation if people can’t do their job without breaching them. And they’re no use if people can’t understand them. Good security rules are brief, clear, and practical.
But good, clear, practical, workable, brief security rules are only half the battle. What the organisation does speaks louder than what it says, and if senior managers don’t themselves honour the spirit of the rules, comply with the detail, and act when breaches take place ‘on their watch’, security problems will be endemic in the organisation.
Annabel Kaye is Managing Director of Irenicon Ltd, a specialist employment law consultancy. Tel: 08452 303050 Fax: 08452 303060 Website : www.irenicon.co.uk. You can follow Annabel on twitter – http://twitter.com/AnnabelKaye and check our regular articles and news throughout the autumn on our blog site – https://irenicon.wordpress.com/