Tuesday, 17 August 2010 20:12
Policy is the Foundation of IT Security
Information Security Policies provide a foundation for business information security. A good policy program will ensure the confidentiality, availability and integrity of business information:Policy creation for small businesses starts with three simple questions, why, what and how.
Why
- Compliance with Laws & Regulations
- Ensure customer protection
- Guard against information loss / theft
- Ensure business continuity
What
- Key Business information is identifiedPoints of interface with information are identified
- Consumers of information are identified
How
- Creation of a policy looks at key points of having a secure business, network and environment this will ensure that all aspects of the small business will be protected, to protect a company from legal issues, to create work standards or to implement fairness to work staff.
- Consultation / Information Gathering
- Policy Creation
- Policy Review
- Training & Implementation
The development of policies include four main steps. First is to review the policies, then gain approval from management and receive legal approval for an policies referring to legal situations.