Forex Ultimate Guides and Tips

Policies – A document that outlines specific requirements or rules that must be met.

Procedures – Procedures define "how" to protect resources and are the mechanisms to enforce policy. Detailed configuration information.

Product – The actual hardware and software to help enforce the policies of an organization.

Security Policy Structure:

Policies define appropriate behavior for your users.

Policies set the stage in terms of what product and procedures are needed.

Policies communicate a consensus from upper management to users.

Policies provide a foundation for HR action in response to inappropriate behavior.

Policies may help prosecute cases or provide evidence of due diligence to prevent cases against the county.

Policies Based on Trust:

Trust everyone all of the time:

easiest to enforce, but impractical

one bad apple can ruin the whole barrel

may not be legally appropriate

Trust no one at no time:

most restrictive, but also impractical

difficult to staff positions

Trust some people some of the time:

exercise caution in amount of trust given

access is given out as needed

technical controls are needed to ensure trust is not violated