Policy and Security (Cont.)

Policy Derivation

Laws, Regulations, School Policies
Often a reaction to defined threats and vulnerabilities

Defines procedures for introducing new applications
(E.G.. virus scanning policy)