ComputerHunter.org

 

Protect Your Computer System with a Comprehensive Security Policy


The most difficult part of creating a Security Policy for your business is determining what, exactly, to include in it. Never heard of a Security Policy before? You're not alone. But whether you are the only employee in your company or you have a small staff working for you, you need to learn what a Security Policy is, and then you need to create one.

In much the same way that a personnel policy informs employees of things like vacation time accrual, performance review schedule and other personnel-related issues, a Security Policy informs your employees of the steps that are necessary to keep your company's network and computers secure. The policy is your company's rules and regulations that are enforceable, under law if necessary, if breached.

A Security Policy will include rules and formal procedures that are clearly written and laid out. But most importantly, the information contained must be easy for employees of all levels to understand.

And just as it is with young children, the content of your Security Policy must be enforceable, and it must be enforced consistently. Saying in writing that something is not allowed, then allowing it to happen during regular work hours sends mixed messages to your employees. They won't know what really is right or wrong, which will defeat the whole point of your Security Policy. Inconsistent implementation also leaves you open to legal liability.

Like any good policy, your Security Policy should be regularly updated to reflect today's rapidly-changing business environment. Most of the time, you will be the person making these changes. However, if your company is growing and adding staff, this may not always be the case. Make sure the person responsible for updating your company's Security Policy has guidelines and boundaries, and most of all, make sure you read and approve any changes made by someone else.

Make presenting your Security Policy part of your new employee orientation procedure. Make sure every employee reads the policy, signs and dates a document certifying that it has been read, and then keep the signed and dated certification in their respective personnel folder. And every time that your Security Policy is updated, make every employee read it again, and sign and date a document stating that they have read the changes.

The types of topics you may want to cover in your company's Security Policy include but are not limited to:

* What can be loaded onto an employee's computer from floppy disk or CD

* What personal business, if any, can be conducted on the company computer

* Which files or company information is allowed to leave the internal network or is allowed to be sent out over the Internet

* Who is allowed to install new software and software upgrades onto the system, and equally important, who is not allowed to do this

* A password management and password change policy which includes the acceptable length of passwords. Provide examples of permissible/non-permissible passwords. Examples of non-permissible passwords might include date of birth, names of pets, nicknames, children's names, etc.

* Who's allowed remote access to your network from off-site

* Policies for locking keyboard or using password protected screensavers when an employee's PC is left unattended

* Who is allowed to attach their laptop or other portable computing device to the network and what information they are allowed to upload/download

* Guidelines for vendors and other visitors who may need access to your network while they are on-site.

Whether you have one PC or several networked together, you have a lot of money invested. Protect this critical business asset with an iron-clad Security Policy.

Copyright © 2004 Cavyl Stewart. For help with creating your security policy or to find security software or other small business programs, visit: http://www.find-small-business-software.com/hr-software.html - Also, be sure to check out my Exclusive, 100% free ecourses.







Google News - Top Stories

Wall Street Journal

Hurricane Ike pounds Caribbean, worries US
Los Angeles Times - 1 hour ago
Cuban fishermen secure a boat before the arrival of Ike. Government efforts, including massive evacuations, appear to have prevented fatalities in recent storms.
Video: Ike Tears Path of Destruction Through Caribbean AssociatedPress
Ike hits Cuba as dangerous Category 3 hurricane The Associated Press
Bloomberg - Newsday - Seattle Times - Chicago Tribune
all 5,866 news articles


Times Online

Global Stocks Rise on Fannie, Freddie Takeover; Treasuries Drop
Bloomberg - 34 minutes ago
By Michael Patterson Sept. 8 (Bloomberg) -- Stocks rose in Europe and Asia, sending the MSCI World Index to its biggest gain since July, on speculation the US government's takeover of Fannie Mae and Freddie Mac will shore up the mortgage market.
Video: US takes over mortgage giants - 08 Sep 08 AlJazeeraEnglish
Dollar mixed after Fannie, Freddie rescue MarketWatch
Forbes - International Herald Tribune - The Associated Press - Wall Street Journal
all 5,090 news articles


Boston Globe

Russia opposes EU monitoring in Georgia
The Associated Press - 25 minutes ago
MOSCOW (AP) - A Russian Foreign Ministry spokesman says Moscow is against an independent European Union monitoring mission in Georgia.
Sarkozy to demand Russian pullout from Georgia USA Today
Hague considers Georgia's claims of Russian human rights abuse RIA Novosti
Reuters - The Press Association - Civil Georgia - Monsters and Critics.com
all 1,130 news articles


Washington Post

US Attack Kills Several in Pakistan
New York Times - 1 hour ago
By JANE PERLEZ and PIR ZUBAIR SHAH ISLAMABAD, Pakistan - Four missiles fired from an American pilotless drone aircraft Monday hit a large compound in North Waziristan belonging to one of Pakistan’s most prominent Taliban leaders, ...
Several explosions in Pakistan's northwest kill 6 Washington Post
US kill six in attack on Taliban commander's house in Pakistan guardian.co.uk
AFP - PRESS TV - Reuters - People's Daily Online
all 149 news articles


Sydney Morning Herald

New Pakistan President Will Face `Struggling' Economy (Update2)
Bloomberg - 41 minutes ago
By James Rupert Sept. 8 (Bloomberg) -- Pakistan's Asif Ali Zardari is set to take over as president of a country with the world's riskiest debt, the weakest currency in its history and a stock market so depressed that the exchange ordered a freeze on ...
Video: Inside Story-Pakistan's New President-Sept 7, Part 1 AlJazeeraEnglish
PAKISTAN: Zardari - Victim of Many Prejudices Inter Press Service
Economist - Jerusalem Post - Times Online - Financial Times
all 3,726 news articles

Google
 

Copyright © 2006 Computer Hunter - A Division of Arthur´s Job Base