Cybersecurity Management Framework and Policies

This document is a guide that outlines the cybersecurity management framework, policies, and specific management plans for effective cybersecurity management. It describes the structure of the information security organization, detailing the roles of the Computer Center, which is chaired by the chief IT officer and includes IT professionals responsible for establishing the information security policy and providing technical support. The guide addresses risk management through a structured plan that includes incident handling and policy improvement mechanisms. It also specifies controls related to account and password principles, hardware and software usage, file management, email management, and network use. Furthermore, it presents specific cybersecurity management plans, including the updating of IT infrastructure, strengthening backup mechanisms, and enhancing employee awareness of information security. The guide emphasizes the importance of periodic policy announcements and training to mitigate risks associated with cybersecurity incidents.