Communications and Information Technology Commission Organizes Workshop for Government Entities on Information Security Policies and Procedures

The Communications and Information Technology Commission, represented by the National Information Security Guidance Center, in cooperation with the Yesser Government e-Transactions Program, is organizing a workshop during the period April 6-10, 2014, on the "Guidance Manual for Information Security Policies and Procedures for Government Entities in the Kingdom of Saudi Arabia," targeting officials responsible for information security policies and procedures in the information security or IT administrative units of government entities.

During the workshop, participating government entities will be briefed on the mechanism for managing potential information security risks the entity may face, through introducing the "Guidance Manual for Information Security Policies and Procedures for Government Entities in the Kingdom of Saudi Arabia" as a tool to help government entities develop their information security policies and procedures quickly and effectively, in line with the information security risks these entities may face.

The Commission had prepared a guidance manual clarifying the responsibility of government entities and the need for a security policy, including an introduction to information security policies and procedures, their preparation, the design of their procedures, and options for establishing an information security department, in addition to introducing the procedures for building an awareness plan, change management, and information security review and audit.