Rules of the Road (II)


Setting a Policy:

Describe the goal
Describe how the policy advances the goal
Define behaviors and procedures
What is authorized access?
What is unauthorized access?
How frequently do the backup tapes get changed?
Define penalties for violation
Define auditing procedures
Get approval for the policy
Publicize the policy

Policies Do Matter:

Randal Schwartz
CIA Chat Room