Writing Information Security Policies

Summary

The nature of transmitting data over the Internet makes it easy for a determined attacker to read your data. The only way to prevent this type of eavesdropping is to use encryption. Encryption is a special technology that governments would prefer people not use because it can be difficult for them to eavesdrop on your transmissions. These issues require unique policy considerations to write information security policies.

1. Legal issues:

   • The United States and other governments classify encryption technologies as armaments. Thus governments have laws in place to restrict both the strength of encryption that could be used and the export of encryption products.

   • In 1998, the Clinton administration started to ease encryption-related regulations. ...