MCITP: Windows Server® 2008 Enterprise Administrator, Study Guide

7.1. Enterprise Security Concerns

When you're dealing at the enterprise level, two of the primary concerns are implementing a secure public key infrastructure (PKI) and ensuring this infrastructure has secure policies to back it up. Microsoft recommends that before your enterprise implements an infrastructure of any sort, it should have the following three documents easily available to users:

• Security policy

• Certification policy

• Certification practice statement

7.1.1. Security Policy

A general security policy is a document that outlines the company's security practices and best policies. This typically covers all the computers and other technological assets that the company holds, and it identifies which assets it considers particularly valuable. ...