Management Information

Protect Your Computer System with a Comprehensive Security Policy


The most difficult part of creating a Security Policy for your business is determining what, exactly, to include in it. Never heard of a Security Policy before? You're not alone. But whether you are the only employee in your company or you have a small staff working for you, you need to learn what a Security Policy is, and then you need to create one.

In much the same way that a personnel policy informs employees of things like vacation time accrual, performance review schedule and other personnel-related issues, a Security Policy informs your employees of the steps that are necessary to keep your company's network and computers secure. The policy is your company's rules and regulations that are enforceable, under law if necessary, if breached.

A Security Policy will include rules and formal procedures that are clearly written and laid out. But most importantly, the information contained must be easy for employees of all levels to understand.

And just as it is with young children, the content of your Security Policy must be enforceable, and it must be enforced consistently. Saying in writing that something is not allowed, then allowing it to happen during regular work hours sends mixed messages to your employees. They won't know what really is right or wrong, which will defeat the whole point of your Security Policy. Inconsistent implementation also leaves you open to legal liability.

Like any good policy, your Security Policy should be regularly updated to reflect today's rapidly-changing business environment. Most of the time, you will be the person making these changes. However, if your company is growing and adding staff, this may not always be the case. Make sure the person responsible for updating your company's Security Policy has guidelines and boundaries, and most of all, make sure you read and approve any changes made by someone else.

Make presenting your Security Policy part of your new employee orientation procedure. Make sure every employee reads the policy, signs and dates a document certifying that it has been read, and then keep the signed and dated certification in their respective personnel folder. And every time that your Security Policy is updated, make every employee read it again, and sign and date a document stating that they have read the changes.

The types of topics you may want to cover in your company's Security Policy include but are not limited to:

* What can be loaded onto an employee's computer from floppy disk or CD

* What personal business, if any, can be conducted on the company computer

* Which files or company information is allowed to leave the internal network or is allowed to be sent out over the Internet

* Who is allowed to install new software and software upgrades onto the system, and equally important, who is not allowed to do this

* A password management and password change policy which includes the acceptable length of passwords. Provide examples of permissible/non-permissible passwords. Examples of non-permissible passwords might include date of birth, names of pets, nicknames, children's names, etc.

* Who's allowed remote access to your network from off-site

* Policies for locking keyboard or using password protected screensavers when an employee's PC is left unattended

* Who is allowed to attach their laptop or other portable computing device to the network and what information they are allowed to upload/download

* Guidelines for vendors and other visitors who may need access to your network while they are on-site.

Whether you have one PC or several networked together, you have a lot of money invested. Protect this critical business asset with an iron-clad Security Policy.

Copyright © 2004 Cavyl Stewart. For help with creating your security policy or to find security software or other small business programs, visit: http://www.find-small-business-software.com/hr-software.html - Also, be sure to check out my Exclusive, 100% free ecourses.


MORE RESOURCES:

MiamiHerald.com

Risk Management Needed for Energy Loan Guarantees, Report Says
Bloomberg
Potential losses from US energy loan programs are likely to be less than projected by the White House and Congress, according to an independent analysis that Democrats said validated support for clean-energy innovation. The Obama administration ordered ...
DOE needs better risk managementiWatch News
Post-Solyndra review urges better energy loan managementThe Hill (blog)

all 274 news articles »


Ariz. tribe votes to take over Skywalk management
CBS News
A northwestern Arizona tribe has voted to take over management of the Grand Canyon Skywalk from the Las Vegas developer who built it. David Jin partnered with the Hualapai Tribe to build the horseshoe-shaped glass bridge that juts out from the Grand ...

and more »


Globe and Mail

Apollo Global Management assets lift off in 2011, up 11%
Pensions & Investments
By Arleen Jacobius Apollo Global Management on Friday reported $75.3 billion in assets under management as of Dec 31, up 11% from a year earlier, according to the alternative investment firm's earnings report. Apollo Global had $35.4 billion in private ...
Apollo Global Management, LLC Reports Financial Results for the Fourth Quarter ...MarketWatch (press release)
Financial Briefing BookWall Street Journal
Apollo Fourth-Quarter Profit Falls 66% on Market SwingsBusinessWeek
Reuters
all 48 news articles »


Vietnam Premier Urges Land Management Review, Citing Transaction Mistakes
Bloomberg
Vietnamese Prime Minister Nguyen Tan Dung has asked for a nationwide review of land management procedures and said local authorities made mistakes in a land acquisition case in the northern port city of Haiphong, according to a statement on the ...

and more »


Business Insider

List Of Pepsi Managers Who Have Left The Company
Business Insider
It's not news that PepsiCo has suffered a lot of management churn in the last few years, and that sales of some brands have been hurt as the company has lost its focus. But it's not until you see the list of senior brand management names who have ...
PepsiCo to Cut 8700 Jobs, Reduce Management Layers in Global Productivity DriveIndustryWeek
PepsiCo Announces Strategic Investments to Drive GrowthMarketWatch (press release)

all 590 news articles »


Carrington Capital Management, American Home Mortgage Servicing Announce ...
MarketWatch (press release)
Resolution of Carrington Asset Holding, LLC, ET Al. Plaintiffs, v. American Home Mortgage Servicing, Inc., Defendant SANTA ANA, CA, Feb 10, 2012 (MARKETWIRE via COMTEX) -- Carrington Capital Management, LLC ("Carrington"), a subsidiary of Carrington ...

and more »


Advanced task managers on iOS
CNET (blog)
by Jason Parker February 10, 2012 12:00 PM PST Follow @jparkerCNET There must be hundreds, if not thousands, of to-do-list management apps in the iTunes App Store, but which one should you choose? I found a couple of new task management apps recently ...

and more »


Spend Management Experts Wins Supply & Demand Chain Executive Award
MarketWatch (press release)
ATLANTA, GA, Feb 10, 2012 (MARKETWIRE via COMTEX) -- Spend Management Experts today announced that founder and CEO John Haber has received the Supply & Demand Chain Executive's 2012 "Pros to Know" award in the provider category.

and more »


Schultze Asset Management Founder George Schultze Delivers Key Comments in ...
MarketWatch (press release)
10, 2012 /PRNewswire via COMTEX/ -- George Schultze, Founder and Managing Member of Schultze Asset Management, LLC ("SAM"), was a key speaker today in Harvard Business School's Creating Value Through Corporate Restructuring course taught by Professor ...

and more »


USA TODAY

Oracle Taleo Buy Targets SAP, Salesforce.com
eWeek
Oracle's $1.9 billion bid for Taleo follows SAP's $3.4 billion play for SuccessFactors and Salesforce.com's acquisition of Rypple in the burgeoning sector for cloud-based human capital management software. Oracle's (NASDAQ:ORCL) $1.9 billion ...
News Analysis: The Implications Of Oracle's Acquisition Of TaleoForbes
Roll up, roll up! Oracle digests TaleoZDNet (blog)
Oracle buys talent management firm Taleo for US$1.9BITWorld Canada
E-Commerce Times -Smart Data Collective -Industry Leaders Magazine
all 108 news articles »

Google News

home | site map
© 2006