Skip to content

Security Procedure

What is Security Procedure?

A detailed, step-by-step instruction for performing a specific security task or responding to a particular security event.

Information Security

What the standards actually require on security procedure

Requirements naming security procedure across 6 standards, quoted from the control text.

The controller sets a written data security procedure based on the definitions document and the Regulations, binding on authorised users as far as disclosed to them on a need-to-know basis, covering physical protection, access permissions, the protective means...

israel-protection-of-privacy-law-5741-1981::DSR-4(a)-(c) · Data Security Regulations reg. 4(a)-(c): written data security procedure with required content →

Payment service providers should keep payment service users informed about updates in security procedures that affect them regarding the provision of payment services.

EBA-GL-97 · Informing users of updates to security procedures →
PCI DSS 4.01 control

Service providers only: at least every three months, reviews must confirm that personnel carry out their tasks in keeping with every security policy and operational procedure.

12.4.2 · 12.4.2 Quarterly reviews that personnel follow security procedures →

Organizations ensure security procedures are defined and followed, including logging of actions and access related to the management of security functions (Tables B3 and C2, 15.2: defined security procedures not followed).

unece-wp-29-r155::A5-M19 · Annex 5 M19 Security procedures defined and followed, with logging of security management actions →

The controller deletes personal data once the designated purpose is met, retaining it thereafter for any legitimate reason only in a form that does not identify the data subject; corrects any error immediately on notice or awareness;

egypt-personal-data-protection-law-law-no-151-of-2020::Art.4.7-9 · Art.4.7-9 Controller: deletion, correction and the record of personal data →

The security assessor confirms that development testing, operational security procedures and installation procedures meet the assurance requirements and issues a statement of assessment.

canada-itsg-33-it-security-risk-management::A2-3.7.4 · 3.7.4 Assess security solution development →

Questions people ask about security procedure

What is Security Procedure?
A detailed, step-by-step instruction for performing a specific security task or responding to a particular security event.
Why is Security Procedure important for compliance?
Security Procedure is a key concept in Information Security. Understanding security procedure helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address Security Procedure?
Security Procedure appears in the requirement text of Israel Protection of Privacy Law (5741-1981), EBA Guidelines on ICT and Security Risk Management (EBA/GL/2019/04), PCI DSS 4.0, UNECE WP.29 R155, Egypt Personal Data Protection Law (Law No. 151 of 2020). Across these standards we have identified 16 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about Security Procedure?
Explore our compliance framework pages to see how security procedure applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how Security Procedure applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Written and maintained by Gerard Blokdyk, The Art of Service.