|
All the Rage: It's 2006: Do You Know Where Your Security Policies Are? |
|
|
|
Source: SecurityPipeline.com - Posted by Benjamin D. Thomas
|
It's the beginning of a new year--time to review your approach to security policy. If you think implementing firewalls, IDSs and antivirus/antispam products is enough, you're sorely mistaken. No matter the size of your enterprise, you must define a framework of security policies, standards and procedures for securing valuable corporate assets. If you don't, you may be leaving your company open to a variety of vulnerabilities.
A quick refresher: Security policies are high-level declarations that seldom change. These differ from standards, which define how to implement the policies, and procedures, which are the step-by-step instructions individuals follow to enforce or comply with standards.
Read this full article at SecurityPipeline.com
Powered by AkoComment! |