Main Article Content
Abstract
An information system is not just computer; todays information systems are complex and having many components those peripherals together to make business solution. The literature clearly agrees that the major threat to an organization’s information security is caused by careless and sick minded employees who intentionally or unintentionally misuse the organization’s information assets. This paper enlightens information security (IS) policies and processes that organizations should follow and also develop effective information security policies. Dire need of practicing good and emerging IS policies and their efficient and effective management has no any alternate option and has unique key concern for all organization. It is of course better to focus on prevention than cure.. In this paper, researcher provides an overview on information security policies that can prove usefulness in finding and fixing security flaws. Since adequate policies cannot be provided by technology alone, it is necessary to rely on a combination of hardware, software, and procedural practicner. The main goals of this paper are to identify some key IS policies and their usage in everyday life of digital generation and digital economy.