Share what you know with millions of people
Focus is the best place to turn what you know into remarkable content
0
Examples of a network security policy?
I'm part of a committee that is drafting a network security policy for our organization. We are at the early stages of developing such a policy, and I'd like to review some policies of other organizations first in order to see what the structure and format of such a document would look like. Does anyone have a network security policy they'd like to share?
Events
- Dos and Don'ts of Small Business Marketing May 29 @ 11 am PT
- Lead Nurturing 202: The Next Generation May 31 @ 11 am PT
- The Tricks to Paid Media June 6 @ 11 am PT
- Display Advertising for Brand Awareness June 20 @ 11 am PT
Related Activity
4 Answers
Trent, have you seen the following templates?
http://www.sans.org/security-resources/policies/
They are highly regarded, and I have used them in the past for policy formation.
-ASB: http://xeesm.com/AndrewBaker
I have always admired the work the State of Ohio has put in to their policies. You will find all of them right here: http://privacy.ohio.gov/ohiopolicies/index.stm
IT policies and procedures are critical to the successful operations of every company. There are three main categories that should be addressed in policy and procedure development. Operations Management, Change Management, and Security Management. Policies state the Scope, Intent, and what the individual policy is. Procedure statements outline how policies are enforced, breaches are reported and consequences for violations of policy.
Each policy should carry a unique identifier, a revision number, revision date and should provide a record of who the author was. All policies should also be reviewed and approved by someone other than the author to ensure proper controls. A record of the approval should be maintained. Annual reviews of each policy and procedure would be considered best practice even if there are no changes.
Well managed policies and procedures are a sign that your company considers IT Governance a priority.
Rick Freeman
A security policy is always a work in progress requiring constant updating. If you are starting from zero, I would look the Massachutetts Written Personal Security Guide. http://www.mass.gov/Eoca/docs/idtheft/sec_plan_smallbiz_guide.pdf
It is designed for use by small businesses to step them through the process of creating a plan, but can also be used by any business looking to take a first foray into creating a security plan.
Answer This Question