An information security plan is a document that details out how the

An information security plan is a document that details out how the security of an organization may be put in place and enforced in order to ensure that the information pertaining to the organization can remain within the organization’s four walls. It also entails the policies that guide the organization in the right direction while enabling control of its security as well as providing solutions to any errors or problems that may arise when insecurity creeps up into the organization (ISACA, 2011).