Implementing and maintaining organisation-wide information security policies, standards, guidelines, and procedures

The Information Security Department has to provide security education and training outlined by the company’s policy.