Protect Your Computer System with a Comprehensive Security Policy

The most difficult part of creating a Security Policy for your business is determining what, exactly, to include in it. Never heard of a Security Policy before? You're not alone. But whether you are the only employee in your company or you have a small staff working for you, you need to learn what a Security Policy is, and then you need to create one.

In much the same way that a personnel policy informs employees of things like vacation time accrual, performance review schedule and other personnel-related issues, a Security Policy informs your employees of the steps that are necessary to keep your company's network and computers secure. The policy is your company's rules and regulations that are enforceable, under law if necessary, if breached.

A Security Policy will include rules and formal procedures that are clearly written and laid out. But most importantly, the information contained must be easy for employees of all levels to understand.

And just as it is with young children, the content of your Security Policy must be enforceable, and it must be enforced consistently. Saying in writing that something is not allowed, then allowing it to happen during regular work hours sends mixed messages to your employees. They won't know what really is right or wrong, which will defeat the whole point of your Security Policy. Inconsistent implementation also leaves you open to legal liability.

Like any good policy, your Security Policy should be regularly updated to reflect today's rapidly-changing business environment. Most of the time, you will be the person making these changes. However, if your company is growing and adding staff, this may not always be the case. Make sure the person responsible for updating your company's Security Policy has guidelines and boundaries, and most of all, make sure you read and approve any changes made by someone else.

Make presenting your Security Policy part of your new employee orientation procedure. Make sure every employee reads the policy, signs and dates a document certifying that it has been read, and then keep the signed and dated certification in their respective personnel folder. And every time that your Security Policy is updated, make every employee read it again, and sign and date a document stating that they have read the changes.

The types of topics you may want to cover in your company's Security Policy include but are not limited to:

* What can be loaded onto an employee's computer from floppy disk or CD

* What personal business, if any, can be conducted on the company computer

* Which files or company information is allowed to leave the internal network or is allowed to be sent out over the Internet

* Who is allowed to install new software and software upgrades onto the system, and equally important, who is not allowed to do this

* A password management and password change policy which includes the acceptable length of passwords. Provide examples of permissible/non-permissible passwords. Examples of non-permissible passwords might include date of birth, names of pets, nicknames, children's names, etc.

* Who's allowed remote access to your network from off-site

* Policies for locking keyboard or using password protected screensavers when an employee's PC is left unattended

* Who is allowed to attach their laptop or other portable computing device to the network and what information they are allowed to upload/download

* Guidelines for vendors and other visitors who may need access to your network while they are on-site.

Whether you have one PC or several networked together, you have a lot of money invested. Protect this critical business asset with an iron-clad Security Policy.

Copyright © 2004 Cavyl Stewart. For help with creating your security policy or to find security software or other small business programs, visit: http://www.find-small-business-software.com/hr-software.html - Also, be sure to check out my Exclusive, 100% free ecourses.

Latest News


Single Source Introduces New Advanced Quote Management (AQM)(TM ...
MarketWatch - 8 hours ago
All functions seamlessly integrate to the inherent back-office financials, inventory, purchasing and management reporting functionality of SM-Plus-meeting ...
KANA Recognized by Leading Industry Publications for Innovation ... Business Wire (press release)
all 22 news articles

Maktoob Business (press release)

ECONOMIC REPORT Global manufacturing gauges collapse in November
MarketWatch - 6 hours ago
... of price pressures hit an all-time low, according to a survey of corporate purchasing managers released Monday by the Institute for Supply Management. ...
Manufacturing index drops to 26-year low Washington Post
Manufacturing index at 26-year low CNNMoney.com
Manufacturing hits 26-year low Bizjournals.com
CNN - Forbes
all 594 news articles

CharlotteObserver.com

Construction Spending Reflects Economic Slowdown
New York Times, United States - 1 hour ago
The Institute for Supply Management’s monthly index of manufacturing activity fell to 36.2, from October’s 38.9. The reading is worse than Wall Street ...
October construction spending drops 1.2 percent International Herald Tribune
US manufacturing weakest since 1982 The Australian
Construction spending fell again in October Bizjournals.com
guardian.co.uk - International Herald Tribune
all 270 news articles

Gideon Technologies CEO To Give Unified Compliance Management ...
MarketWatch - 4 hours ago
Unified Compliance Management simplifies this complex problem. "The combination of a holistic centralized view of the network, unified and continuous ...

WCBD

Price Tags on Partridges and Pear Trees: A Different CPI
New York Times, United States - 1 hour ago
By Catherine Rampell For the last 24 years, PNC Wealth Management (or its predecessor, Provident Bank) has released this whimsical index, a measure of the ...
Video: 12 Days of Christmas' Items Would Cost $86,609 AssociatedPress
'12 Days of Christmas' items would cost $86609 The Associated Press
Twelve Days of Christmas would cost $21000 Telegraph.co.uk
Reuters - guardian.co.uk
all 348 news articles

Reuters

AIG sells wealth management unit to Abu Dhabi group
International Herald Tribune, France - 10 hours ago
NEW YORK: American International Group, the troubled insurance giant, said Monday that it had agreed to sell its wealth management provider AIG Private Bank ...
AIG Sheds A Private Bank Forbes
UPDATE 1-AIG to sell AIG Private Bank to UAE's Aabar Reuters
AIG to Sell Private Bank to Aabar Wall Street Journal
Trade Arabia - InvestmentNews
all 161 news articles

Updated Information Regarding Auction Preferred Securities Market ...
MarketWatch - 1 hour ago
BOSTON, Dec 01, 2008 (BUSINESS WIRE) -- MFS Investment Management(R) (MFS) today announced the availability of information on the results of the weekly ...

AGC and LCM Declare Dividends
MarketWatch - 1 hour ago
a diversified closed-end management investment company, has declared its December monthly dividend of $0.0664 per share, reflecting a reduction of $0.0286 ...
AGC and LCM Declare Dividends Trading Markets (press release)
Madison Strategic Sector Premium Fund (MSP) Declares Quarterly ... MarketWatch
PPR - $.0340 November Dividend MarketWatch
MarketWatch
all 52 news articles

Lincoln Financial Group Announces New Senior Management Committee ...
International Business Times, NY - 2 hours ago
She will also serve as amember of the firm's Senior Management Committee. Bettinger-Buckingham joins Lincoln Financial with more than 20 years ofexperience ...

The Apogee Companies, a Leading Property Management Company ...
MarketWatch - 12 hours ago
"These upcoming new deals will broaden our abilities to grow throughout the US" The Apogee Companies is a leader in property and real estate management with ...

Resources