evsjv‡`k †M‡RU, AwZwi³, GwcÖj 6, 2014 12547 security for a government while implementing e-governance. This document is a guideline to help government agencies to formulate their own Information Security Policy to protect their information in the cyber space. In recent past, Bangladesh has faced a number of cyber attack incidents in the form of web defacement, information damage, information theft, Distributed Denial of service, etc, due to lack of information protection procedure, weak and unmanaged security controls and lack of expertise because of under skilled personnel. Currently, there are no sufficiently enforceable preventive, reactive, detective and administrative security measures against the above mentioned threats to protect digitized government resources. So it is necessary to have a proper security policy and implementation mechanism in place. This policy will act as a guideline document for government agencies who intends to formulate their own Information Security Policy for the protection of their information in the cyber space. 2. Introduction (1) Information is the most valuable asset for an agency. Information has different dimension in terms of accessibility. Some information is public where as some are confidential. Depending on the degree of confidentiality, information has several level of accessibility as well. Such as there are information which are open for public access without any authentication, some are accessible with single factor authentication, some require multi factor authentication whereas some are private within the organization, some are highly confidential that only a group of people in an organization has access. So it is very important for an agency to have clear understanding about its information and its accessibility. Before preparing an Information Security Policy it is recommended for an agency to classify their information through proper assessment. (2) Internet is an open platform for all to access information. Internet technology and other technologies like handheld devices, mobile devices, tablet PCs, wireless technologies are making information easily accessible and affordable. There may be some situation when information can be used as weapon to make chaos in a country. So it is the duty of an agency to take care of its own information in the internet. Apart from information in internet, the agency should also be aware of the information that may have different state such as information that`s moving in the intranet or LAN or in the cloud or simply stored in an internal database or in a PC. (3) This guideline covers : a. Brief illustration of different terminology that`s important to know while preparing Information Security Policy,