[b]SECURITY POLICY DIRECTIVES[/b]



The following are TS Restaurant's top-level enterprise security policy directives. These policy statements reflect the priorities and risk posture of the company. Top-level enterprise security policy directives should be technology neutral, and reflect basic core values that are unlikely to change in the near future. All security policy statements and procedures must be consistent with these policy directives. If a new (lower-level) policy statement appears to be necessary to provide guidance for a new situation, and these top-level directives appear to provide no guidance as to how to proceed, TS Restaurants should attempt to determine what the underlying motivations for the new statement are, and those motivations should be encapsulated within this high-level directive document.



1. TS Restaurants must _____________ customer, employee and other sensitive information in compliance of industry regulation.

2. TS Restaurants must _________ risks against the reputation of the company to have equal weight with risks associated with loss or damage of systems or information.

3. Where security measures conflict with the functionality of mission-critical systems, an analysis of the __________ associated with the operation of those systems must be performed and a balance struck between maximum security and business critical functionality.

4. TS Restaurants must deploy security consistent with defending against all common forms of __________ available to external attackers.

5. TS Restaurants must deploy __________ consistent with preventing TS Restaurants resources from being used to conduct attacks against other foreign systems.