Reply 2
Your post gives invaluable insights into the relevance of Information Security policies in organizational settings. It rightly affirms that the management sets the tone for the level of information security compliance that the employees will uphold. High-security standards are beneficial because once adopted by everyone in the organization, keeping attacks at bay becomes much more manageable (Kumar et al., 2007). The ultimate reduction of risk and increase in compliance is best achieved by information that is housed within a particular work environment. As such, knowledge sharing, organizational learning, and knowledge management are key aspects of information security.
References
Kumar, R., Pandey, S. K., & Ahson, S. I. (2007, December). Security in coding phase of SDLC. In 2007 Third International Conference on Wireless Communication and Sensor Networks (pp. 118-120). IEEE.