Creating a Security Policy Framework That Works

Discover how to develop an effective security policy framework in this 23-minute OWASP Foundation talk by Isaac Painter. Learn about governing documents, governance structures, policy language, compliance, and managing changes. Explore scenarios, the importance of a single source of truth, review cycles, uniform branding, and handling exceptions. Gain insights into the benefits of implementing a robust security policy framework that works for your organization.

Introduction
Scenarios
Governing Documents
Governance Structure
Policy Language
Compliance
Structure
Source of truth
Review Cycle
Managing Changes
Uniform Branding
Exceptions
Summary
Benefits