Writing Information Security Policies

Administrative Responsibilities

After you are done with the policies for connecting to the Internet, it is time to concentrate on specific areas that affect the usage of that connection. I like to start with the administrative policies. Besides being the simplest of the remaining policies, they are also the most forgotten because policy writers assume that they are covered in other areas. That could be true, but introducing them here will enhance their necessity.

Maintenance

The first responsibility to talk about is maintenance. Policies should require that administrators perform regular maintenance to maintain public data areas. As simple as it sounds, there have been organizations that have not specifically called for maintenance of web ...