Scene of the Cybercrime: Computer Forensics Handbook
An introduction to the field of law enforcement for IT professionals.
TABLE OF CONTENTS Scene of the Cybercrime: Computer Forensics Handbook
Designing and Implementing Security Policies
Security issues are at the forefront of organizational priorities today. Companies lose millions of dollars and untold hours of worker productivity due to lax security. Companies realize that protection of their assets digital as well as physical is no longer a luxury; in the twenty-first century, it has become a necessity.
An enormous amount of a company s most crucial information, including financial data, personnel records, customer information, and trade secrets, is concentrated in one virtual place : the organization s network. This centralization renders this information vulnerable to unauthorized access and accidental or intentional destruction, both from within and (assuming the local network is connected to the Internet, as most today are) from outside intruders. Implementation of security measures, to be effective, must be based on an organized plan that takes into account all aspects of the organization s security needs. There must be rules and guidelines governing how the plan is put into action. These are disseminated throughout the organization as policies.
Understanding Policy-Based Security
Those of us in the security field often stress the need for detailed policies that are customized to fit the needs of each particular organization sometimes to the point of sounding like a broken record. However, there s a good reason for this: The security policy is the foundation of an organization s security plan. It is the governing document, much like a police department s general orders, a city s charter, or a corporate board s mission statement. The following sections discuss the purpose and function of an IT
Copyright Syngress Publishing, Inc. 2002 under license agreement with Books24x7
