Overview

Business the world over invest significant financial and human resources in deploying technical tools, solutions and network and security components, only to find themselves wondering why such investments fail to give the anticipated benefits.

Odyssey’s experience strongly suggests that the reason for this mismatch in expectations vis-ΰ-vis the reality, can be attributed to the lack of a coherent policy framework and related operational parameters to guide and restrict the users.

As a separate problem, organisations who invest in the design of a security policy (invariably by devoting substantial time of resources who are necessary for other tasks or projects), often find themselves with a paper deliverable which is not easily implementable, is difficult to understand, does not correspond to the business’ needs and culture, etc.  These symptoms are often exacerbated by the lack of a coherent set of processes and procedures which are themselves designed to support the approved policy and help in its smooth and swift implementation and ongoing effectiveness.

Our IS Policies and Procedures services comprise a proven alternative to the above approaches.  Our experienced team of consultants has assisted numerous organisations in designing and rolling out a robust framework of information security policies and supporting procedures and baseline standards, which are practical and fit the culture of the organisation.

Due to our experience and deep knowledge of these matters, we are able to provide a highly cost-effective solution to the alternative of performing this task in house both in terms of cost, time to completion and completeness of solution.

Key Benefits

•  Avoidance of the need to “reinvent the wheel” in policy design using internal resources

•  Implementation of a robust governance and management framework which is in line with the culture of the business and also subscribes to internationally accepted practices and regulatory requirements

•  Highly time efficient development of the organisation’s security policy framework and related procedures

•  A business focused approach to implement a comprehensive set of guidelines and standards which themselves are designed to reduce administrative overheads and improve the organisation’s security profile

•  Our approach is designed to assist IT and business management understand the implications of their decisions in relation to the necessary time and financial investment that may be implied by a set of policies and procedures.  At the same time, you can enjoy maximisation of the chances of successful implementation of the approved framework

•  Protection of organisation’s information and other key assets and minimise operational, financial and other losses

•  Control over the ongoing operation of the information security management system

•  Increased staff accountability

•  Increased degree of legal protection

•  Reduction of ambiguity of “dos and donts” by the users