Policy Management Framework for Managing Enterprise Policies

Policy management in organizations became rising issue in the last decade. It’s because of today’s regulatory requirements in the organizations. To manage policies in large organizations is an imperative work. However, major challenges facing organizations in the last decade is managing all the policies in the organization and making them an active documents rather than simple (inactive) documents stored in computer hard drive or on a shelf. Because of this challenge, organizations need policy management program. This policy management program can be either manual or automated. This paper presents suggestions towards managing policies in organizations. As well as possible policy management solution or program to be utilized, manual or automated. The research first examines the models and frameworks used for managing policies from various perspectives in the literature of the research area/domain. At the end of this paper, a policy management framework is proposed for managing enterprise policies effectively and in a simplified manner.





References:
[1] Micheal E. Whithman and Herpert J. Mattord. (2005). Principles of
Information Security. (2nd Ed). Canada: Thomson Learning.
[2] Wikipedia. Policy. http://en.wikipedia.org/wiki/Policy. (Last accessed
on April 30, 2010).
[3] Harris Weisman. (2006). Policy management: Manual vs. automated
tools. Information Security magazine.
[4] PolicyMatter - White Paper: the Freedom of Information Act - Why
effective policy management is crucial. 05/01/2005 available:
http://www.policymatter.com/news/news050105/.
[5] Dinesh C. Verma & IBM Thomas J Watson Research Centre (2002).
Simplifying Network Administration Using Policy-Based Management.
IEEE Network, 02, 0890-8044.
[6] UTM. (2010). Introduction. http://www.utm.my/aboututm/aboututm.
html (accessed on: 19 May 2010).