A business have to manage lots of different information. All information systems have 2 big issues, one is the organisation who receive the information and the other is that appropriate members of staff gets the information. A number of policies have to be put in place concerning security of information, backups, health and safety, organisational policies, costs and increasing sophistication. Security of information can be an operational issue. It is all about maintaining the integrity and availability of organisational information and knowledge. Managers need to have the right information available at the right time to make good decisions. The reliance on technology to store information increases which means the risk posed by system failure and malicious attack from viruses also increases. IT security policy should take into account common risks to information the business relies upon.
This policy should include secure login id for IT systems and controls that limit access to information. Backups are also an operational issue these are stores on separate hardware from the live versions of the information. Health and safety can be an operational issue. There are many regulations concerning health and safety. The Health & Safety (Display Screen Equipment) Regulations 1992 this is the minimum requirements for work stations and includes the extent to which employers must ensure that workstations meet the requirements laid down in this schedules, the equipment, the environment and the interface between the computer and operator. Another is the management of health and safety at work regulations 1992 this is that every imployer shall provide his employees with comprehensible and relevant information.