One of the best ways to implement an operational security policy is to apply the concept of defense in depth. Defense in depth is the premise that no single layer is completely effective in securing the organization. The most secure system has many layers of security, eliminating single points of failure.

• Define what comprises an information security policy, including how it utilizes the concept of defense in depth.
• Discuss the information security policys role in an information security program.
• Explain why it is necessary to implement a security policy for an organization.
• Discuss the policies needed for an organizational infrastructure to be effective against security breaches.
• Discuss the process of developing, implementing, and maintaining various types of information security policies.