Consider the two approaches described in your text to developing an information

Consider the two approaches described in your text to developing an information security policy (Security Systems Development Life Cycle [SecSDLC] and Information Security Policies Made Easy [ISPME]). In your initial post, answer the following:

1. How are they similar? How are they different?

1. Is there another approach that might be used?

1. Which might be better suited for use by a smaller organization? Why?

1. Which is might be suited for a larger organization? Why?

1. What criteria you would consider before making a recommendation for adopting a formal approach to policy development?