What best practices would you follow for implementing an information security program at your organization?

While no single set of rules or guidelines are the “best” for any specific environment, there are general best practices that should result in a secure environment. What best practices would you follow for implementing an information security program at your organization? Support your answers with information and examples from your text and your experiences.

Additionally, remember to respond to at least two classmates’ posts. Posts must be substantive. Posts saying “thank you for your post” or “good post” are not substantive. Consider sharing an insight you had or why you agree/disagree with the post and your reasoning.