Cybersecurity Policy vs General IT Policy

for my organization, we combined all into one policy for easy tracking. i heard of some companies having many SOPs, depends on ur needs.

Mine has a dedicated cyber security policy as it covers quite a lot of details.

well, good to have a dedicated one. u can build on it as time goes, there's so many things about cybersecurity. having one sop will help give ur mgmt a better view too.

One thing to note though is while having policies are good, make sure there is a plan to implement them too. Otherwise it will just be some bytes on a hard disk somewhere.

@Kenneth Lee totally agree with you. Many a time, these policies are created just to fulfill audit or environmental needs. To really have a good plan to implement them is another story. that's why auditors always ask for evidences of implementation.

I think having one policy will be enough. But u need to put in all the necessary details to tackle all the security needs of ur company.