The High Level IT Security Policy Framework provides a base
level range of policies which may be modified and adopted by
your organization and upon which a comprehensive Control-IT
culture may be based.
These policies can be implemented in conjunction with the
Detailed Control-IT Policy Framework module that includes the
key policy requirements from all 318 detailed control objectives
found within CobiT.
Following adoption of the Control-IT Polices – either revised or
‘as is’, the primary objective is to distribute them to your
organization’s staff. Some organizations already have an
Intranet for the distribution of this type of information. This
component simplifies this process.