Monday, 21 May 2012
Information security policies
Information security policies are a special type of documented business rule for protecting information and the systems which store and process the information. Within an organization, these written policy documents provide a high-level description of the various controls the organization will use to protect information.
List Topic Article
Highlights
Still saying no to employees using iPads, iPhones and other consumer devices on the company network? Al Raymond of PHH Corporation explains why this policy is actually putting your security in peril.
In the past few months, we have witnessed the extraordinary lengths cybercriminal attacks can go to in order to breach target networks and steal valuable data for monetary or competitive gain. This phenomenon is particularly apparent in the world of electronic commerce, where full account details of credit card users are sold for a premium on the black market.
Omnicom CIO Kenneth Corriveau explains how he keeps employees happy by allowing them to use their own gadgets, but also secures his network by ensuring insecure devices are kept at bay.
Regardless of what mobile devices your employees use, without a policy, security disappears. Here are five questions to ask to cover your bases in a mobile security policy
Explaining the reasons behind security policy, rather than relying on a quick answer, can go a lot further toward employee compliance and understanding.
