Security

Ask something
Discussion Locked

SECURITY BEST PRACTICES

0 helpful
8 replies

by goncalves

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Are there any published best practices for security available and how does one obtain a copy?

8 replies

by pjpatiky

goncalves - Go to IE, clear Address block and type in:

? Computers, Acceptable Employee Use

? Computers, Security Practices

? Computers, Security Guidelines

The above are writings/guides by Businesses, Universities, and Computer Managers.

With the above you should get several hundered near hits and 30 or so direct hits on how to set up Computer Security. Then write up a rough draft to fit your particular work enviorment, computer product, employee structure, and physical floor plan(s). Then mix your rough draft with the formal written practices you have taken from the above ? guides. Then have a Staff presentation to plug up the minor leaks before you put your policy into hard copy and effect.

Having come out of Senior Management where Seciruty was paramount I emphisize that your weakest link in Seciruty is your own employees. Create a Wiring Chart, (Chain of Command) to oversee that your policies are being adhered to. Appoint a pre-work monitor, and a post work monitor that will sparodically check each work station. And appoint one person to be the overall Security Officer to also monitor policy effectiveness and compliance.

Come back to me via my Hotmail address if I may further assist.

by pjpatiky

One of the essentials of Security is repititious communication with work stations and Information handlers. This allows to the Security Coordinator to see where new practices should be introduced, and view where policied practices are in force.
In your case you have not returned an ethical reply to you Post. Is this indicitive?

by goncalves

Your feedback was a great help to me - I found many artices outlining best practices for security. Thanks so much!

by brandon.j.carroll

The Managing Cisco Network Security book, there is a great deal of security issues and alternatives discussed. I find that you will never be able to keep someone out if they want in bad enough. The key is to make it as difficult for them as possible. Not only firewalls and intrusion detection devices, but constantly changing your password and monitoring the logs. Believe it or not, if your company has alot of contract employees, they're real curious about what is out on the LAN. Even if it's not intended to cause harm.

This discussion is closed to new replies.