Frameworx Process: Define Security Management Policies & Procedures

Category: (3) eTOM Process Type

Process Identifier: 1.7.2.2.3

Original Process Identifier: 1.3.2.2.3

Maturity Level: 4

Description

Define the policies, guidelines, practices and procedures to be followed. responsible for setting Security Management corporate policies, guidelines, best practices and auditing for compliance by the enterprise. Security Management addresses internal and external sources of security violations. . Note that Audit Management processes provide assurance that the necessary control structures are in place, and provide an estimate to the extent to which the procedures are followed and are effective.

Extended Description

Not used for this process element.

Explanatory

Reserved for future use.

Mandatory

Reserved for future use.

Optional

Reserved for future use.

Interactions

Candidate Explanatory

Reserved for future use.

Candidate Mandatory

Reserved for future use.

Candidate Optional

Reserved for future use.

Candidate Interactions

Reserved for future use.

(3) eTOM Process Type Define Security Management Policies & Procedures

Appears on these diagrams:

• 1.7.2.2 Security Management

Issues

• Business Process Framework 12.0 Addition
• Business Process Framework 15.0 Modification
• Business Process Framework 15.5 Modification

---