The Information Technology Security Manager should develop the IT Security Plan with assistance from Information Technology Managers, using ITSD102-2 IT SECURITY PLAN as a guide. The IT Security Plan Template should cover assignment of security responsibility, system operational status, general description/purpose, and more.
The Information Technology Security Manager should communicate the Information Technology Security Plan to all affected persons, distributing the plan to all managers and supervisors, requiring managers and supervisors to communicate the Plan to their staff, and resolving any questions related to the Plan. Information Technology Managers should coordinate employee security training with Human Resources Management. The Information Technology Security Manager should routinely monitor and periodically report (once a quarter, depending on the size of the company and its Information Technology network) to Information Technology Managers on the status of the Information Technology Security Plan.