ITP.1.3.030 Strategy

The Tribe strives to mitigate risks while complying with legal, statutory, contractual, and internally developed requirements. In building this strategy, the Tribe shall define its control objectives and establish an implementation plan. The security strategy shall include:

(a) Cost comparisons of different strategic approaches appropriate to the Tribe's environment and complexity;

(b) Layered controls that establish multiple control points between threats and Tribe assets; and

(c) Educating officers and employees in implementing the information security program.