The purpose of such a policy is to evaluate possible security risks, and to foresee security measures and procedures for ensuring integrity, availability and confidentiality of the enterprise data and ICT systems.
Njen namen je oceniti morebitna varnostna tveganja pri uporabi IKT in predvideti varnostne postopke ali ukrepe za zagotavljanje integritete, dostopnosti in zaupnosti podatkov podjetja in sistemov IKT.