Role of Administrative Information Security Policies over Technical Policies in Information Security Management

Information security has always been a major challenge to most IT companies. To ensure business continuity, the security of corporate information is extremely important. As Information can take many forms, hence methods of securing information are various. This research study intends to investigate the implementation of Information Security Policies (ISP) by IT companies based on different domains, in order to protect assets of the organization and to minimize business losses. This study further states that as technical policies are domain specific and administrative policies are addressed to all the employees of the company, hence it plays vital role in Information Security Management.