SSCP: Systems Security Certified Practitioner

An information security policy should provide stable, long-term management direction. Short- and mid-term objectives or implementation details are better addressed through supporting standards, procedures, and plans. Policies should instead clearly assign responsibility and authority and be understandable to, and supported by, relevant stakeholders.