|
















Caution!
If you suspect you are under technical
surveillance,
and wish to discuss having your phones or computers
swept for eavesdropping implants, please DO NOT
call/email us from a suspect terminal - instead use a
mobile phone not normally associated with your place
of work (see FAQs, in Resources section, for further
information on technical surveillance threats). |
|
 |
| |
|
|
 |
 |
 |
Introduction
An Information Risk Management (IRM)
policy serves as top-level management's written commitment
to ensuring that any risks identified in the Risk Analysis
(RA) process are addressed as far as reasonably practicable.
Such a policy is fundamental to the success of the
myriad of processes and technologies needed to ensure
adequate IRM, whether driven by management's own risk handling
strategies or strategies mandated by industry
regulation, or indeed, national security interests.
Conduct
Hereford InfoSec has broad
experience of the drivers for IRM policies and is thus
able to support the development of client policies in
accordance with:
|
 |
|