B.2. The Developmental Process

The process of fine-tuning the network usage policy for a specific organization goes through many phases:

Discovery

This first step is ideally performed with input from all levels of an organization that use the network. This not only provides a comprehensive policy, but eases employee support and education efforts. Here are some typical questions that you need to answer:

  • Which company roles (or individuals) need access?

  • Which specific network services do they need?

  • What are the current methods of access (including time and location)?

  • Which core business applications are Internet-integrated?

  • What constitutes sensitive data?

  • What are the measurable productivity goals, and how do network resources achieve those goals? ...

Get Mastering™ Network Security, Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.