Protect Your Computer System with a Comprehensive Security Policy

The most difficult part of creating a Security Policy for your business is determining what, exactly, to include in it. Never heard of a Security Policy before? You're not alone. But whether you are the only employee in your company or you have a small staff working for you, you need to learn what a Security Policy is, and then you need to create one.

In much the same way that a personnel policy informs employees of things like vacation time accrual, performance review schedule and other personnel-related issues, a Security Policy informs your employees of the steps that are necessary to keep your company's network and computers secure. The policy is your company's rules and regulations that are enforceable, under law if necessary, if breached.

A Security Policy will include rules and formal procedures that are clearly written and laid out. But most importantly, the information contained must be easy for employees of all levels to understand.

And just as it is with young children, the content of your Security Policy must be enforceable, and it must be enforced consistently. Saying in writing that something is not allowed, then allowing it to happen during regular work hours sends mixed messages to your employees. They won't know what really is right or wrong, which will defeat the whole point of your Security Policy. Inconsistent implementation also leaves you open to legal liability.

Like any good policy, your Security Policy should be regularly updated to reflect today's rapidly-changing business environment. Most of the time, you will be the person making these changes. However, if your company is growing and adding staff, this may not always be the case. Make sure the person responsible for updating your company's Security Policy has guidelines and boundaries, and most of all, make sure you read and approve any changes made by someone else.

Make presenting your Security Policy part of your new employee orientation procedure. Make sure every employee reads the policy, signs and dates a document certifying that it has been read, and then keep the signed and dated certification in their respective personnel folder. And every time that your Security Policy is updated, make every employee read it again, and sign and date a document stating that they have read the changes.

The types of topics you may want to cover in your company's Security Policy include but are not limited to:

* What can be loaded onto an employee's computer from floppy disk or CD

* What personal business, if any, can be conducted on the company computer

* Which files or company information is allowed to leave the internal network or is allowed to be sent out over the Internet

* Who is allowed to install new software and software upgrades onto the system, and equally important, who is not allowed to do this

* A password management and password change policy which includes the acceptable length of passwords. Provide examples of permissible/non-permissible passwords. Examples of non-permissible passwords might include date of birth, names of pets, nicknames, children's names, etc.

* Who's allowed remote access to your network from off-site

* Policies for locking keyboard or using password protected screensavers when an employee's PC is left unattended

* Who is allowed to attach their laptop or other portable computing device to the network and what information they are allowed to upload/download

* Guidelines for vendors and other visitors who may need access to your network while they are on-site.

Whether you have one PC or several networked together, you have a lot of money invested. Protect this critical business asset with an iron-clad Security Policy.

Copyright © 2004 Cavyl Stewart. For help with creating your security policy or to find security software or other small business programs, visit: http://www.find-small-business-s oftware.com/hr-software.html - Also, be sure to check out my Exclusive, 100% free ecourses.

---

Innovation Management ? Eliciting Dominant Ideas

Creativity can be defined as problem identification and idea generation... Read More

Nine Steps to Help You Develop Your Potential

Go into any bookstore and you will find a big... Read More

Top Ten Tips About Communicating with Your Employees Effectively

Communication is the basis of who you are as a... Read More

Better Manager Skills - How to Learn

When you first take over a department, expectations are usually... Read More

Employee Retention: Its a Changing Game

As a management consultant, I have seen some poorly conceived... Read More

How To Prevent Your New Manager From Becoming A Statistic

According to a study by the Manchester Group, 4 out... Read More

Credibility - A Golden Key to Becoming More Influential

You have been named a new leader in your organization,... Read More

Is Busyness Affecting Your Business?

I'm too busy; I'd love to but I'm very busy;... Read More

Great Employees = Passionate Consumers

Companies spend millions of dollars each year identifying their brand,... Read More

Poly Bags and Pallet Shrouds - Just Get it Right

For many companies, procuring the right packaging, such as Poly... Read More

Organizational Culture, Creativity, Innovation

It can be concluded with great certainty that certain organizational... Read More

Keys to Feeling Powerfull In An Uncertain World

Life has always been full of uncertainties. Over the last... Read More

Managing Meetings

Plan/prepare - lack of purpose causes aimless meetings. Know why... Read More

Are You Prepared for a Disaster?

Yesterday I look at my calendar and saw that my... Read More

Innovation Management ? Emotion, Habit, and Culture can be Hard to Change!

Creativity can be defined as problem identification and idea generation... Read More

Managing Yo-Yo Style

Does being managed by others smack more of "Survivor" than... Read More

Contract Management Software: the Solution to the Problem of Coordination

Charles Petrie, from Stanford, released a short article entitled "The... Read More

Are Your Marketing Pieces Up to Date?

The other day someone asked me for one of my... Read More

Quality Hiring: Are You Doing It Right?

Quality hiring is more than running ads, screening, interviewing and... Read More

Top 10 Things Every Business Should Provide for Every Worker - Including the Boss!

Doing business and meeting the needs of workers is increasingly... Read More

Prepare A Winning CV

There is every chance that elements of this article may... Read More

Diversity Training: The Worst Possible Reasons to Request Executive Funding

You're on your organization's diversity committee. You have the best... Read More

Tales from the Corporate Frontlines: Senior Management and Directional Change

This article relates to the Senior/Top Level management of an... Read More

5 Steps to Identify Core Processes

Part Two of Creating Well-Defined Processes SeriesNext Week: ImplementationLast week,... Read More

Tales from the Corporate Frontlines: Creating a Culture of Empowerment

This article relates to the Culture & Climate competency, commonly... Read More

Selecting a Business Broker or Intermediary to Help You Sell Your Business

As crazy as it seems, some people spend more time... Read More

How To Use W Edwards Deming

Human beings and the way they interact are extraordinarily Complex.... Read More

A Checklist for Organized Executives

I could begin this article by providing a checklist of... Read More

Top 10 Things NOT To Tell Angel and VC Investors

I am not writing this to create a list of... Read More

7 Tips for Growing Your Business You Do Not Want to Ignore: Business Strategies To Easily Implement

Growing companies must always be ready for the next challenge.... Read More

Profound Knowledge

We all are on a quest for knowledge. Whether its... Read More

Effective Meetings - Quick Survey

Here's an easy quiz to check the health of your... Read More

The Changing Boss-Secretary Relationship

THE CHANGING BOSS-SECRETARY RELATIONSHIP: Imagine a partnership at work. One... Read More