Scope of the ISMS The security policy in this document has been prepared in accordance with the needs of MilkChurn, a leading diary firm based in the United Kingdom. The strengths of the companies lie in the sales and marketing, retail & convenience, wholesale and food services. The company records an annual turnover of approximately £ 250 million. The firm management believes in a variety of market segment with its product line that includes yoghurts, baking products, cereals, flavoured butters, ice cream, butter, cream, spreads, mayonnaise, fruit juices, soft cheese, prebiotic dairy, frozen desserts and milk. The operations, which consist of the company’s central part activities, include trade dealing, blending, associate production, brand administration along with development and manufacture. The firm is successful and holds an eminent share in the internal UK market, leading to booming chains of supermarkets, convenience and specialty stores. In addition, the company also employs overseas sales of its products to various foreign markets including the Caribbean, Middle Eastern and North American markets. MilkChurn aims to reach a very standard and aims to maintain their strong presence in the dairy service market by presenting itself as an exclusive and efficient sourcing choice. The company opens various activities in order to complete its goals and meet its growth objectives. Such functions include comprehensive brand management and market development moves. Further, the company ensures close teamwork in its supply chain and carefully oversees all its operations such that the implemented plans are logical and in agreement with market demands. MilkChurn uses the support of 70 full time on the job employees to ensure the smooth running of the I.T. infrastructure of the company. These personnel are well spread across five operational divisions, namely purchasing and export, retail sales, production, food service and trading and marketing. The information technology framework in the firm comprises 50 networked workstations in addition to four servers. Minor connectivity is obtained by means of a standalone Internet connection. The Internet connectivity is made use of for primarily for Email communication, web browsing and Electronic Data Interchange (EDI) with collaborators and retailers for efficient supply chain activities. Figure 1: Milk Churns Basic Operational Structure This report keeps the operational structure of the business processes in the firm in mind and a broad based security policy is developed. A systemic approach was identified to be the most proper method to adopt in order to achieve a wide-ranging risk management policy. The system primarily deals with information security in the firm. However, it also pays attention to important business processes which might have an impact on or can be notably affected by the security policy of the firm. ISMS Policy The objective of this policy is to provide the management of the firm a sense of direction to help the smooth performance of essential information security. This policy is endorsed by the management and is regularly reviewed to assess and evaluate its effectiveness and understand the overall impacts it has on the ent