Writing Information Security Policies

World Wide Web Policies

Here is one area where over familiarity seems to cause lapses in policy. Everyone knows about the web. Everyone uses the web and has an opinion on policies, but they are usually from a selfish point of view. The web can be a powerful tool, but it also can be a source for problems. My goal for web policies is to make the experience safe for an organization and not put a lot of unnecessary and unenforceable restrictions on users.

Web Access to Network and Infrastructure

Over the years, the moving target of information security is how the organization maintains its web servers and the systems that support web services. Every time new security measures are discovered, new vulnerabilities and hacks are discovered. Web ...