How to Make Users Aware of Securities Policies

Policies must be meaningful, actionable, and relevant. During the development of policies, you probably should do some user acceptance testing to ensure that the policies are meaningful to users. It is also worthwhile pointing out that policies must be simple enough to understand and remember for users. The policies have to be accessible to users.

The general user population probably should not have to read more than about five policies, and each of those policies should probably have no more than five to seven important points to them.

Adopted from Protect Your Windows Network : From Perimeter to Data by Jesper M. Johansson, Steve Riley.