FITS OM: Implement the policies
With the appropriate policies and procedures written, appropriate forms developed and the staff fully trained, introduce the security policies into the ICT environment. This effort often involves collaboration between different groups, including the security administrator, school administrators and the like. You should outline and discuss in detail the planning stages before reviewing the tasks to perform.
Other areas to address include staffing, training requirements and organisational issues. For the strategy, determine the appropriate number of people required to implement and run the security policy. This may mean moving technical support staff to different jobs or using additional staff or suppliers. You must weigh resource considerations like this against your budget constraints.
It is good practice to time staff training to coincide with the implementation of your security policies. Remember, the shorter the time between the training and actual hands-on use in the school environment, the better.