PURPOSE This policy provides guidelines for the delegation of user privileges on organization-owned systems. It also provides guidance for usage of high-privilege or administrator accounts. From the policy: Limiting the use of superuser accounts Users must not use administrator or root accounts — or similarly high-leveled account types — for tasks that do not require ...

PURPOSE As more and more users work from remote locations, the need for secure access to networks, systems and data continues to grow. This policy from TechRepublic Premium provides guidelines to help IT ensure that VPNs are properly deployed and outlines acceptable use policies for end users on company-issued and personal devices. From the policy: ...

PURPOSE This policy outlines guidelines and processes for requesting, obtaining, using and terminating remote access to organization networks, systems and data. It applies to scenarios where employees connect remotely to in-house data centers as well as offsite facilities, such as cloud providers. From the policy: DETERMINING ELIGIBLE USERS Only users with a demonstrable business need ...

SUMMARY Risk management involves the practice of addressing and handling threats to the organization in the form of cybersecurity attacks and compromised or lost data. The process of establishing appropriate risk management guidelines is critical to ensure company operations and reputation do not suffer adverse impacts. It’s not an easy process, achieving a sound risk ...

The Security Incident Response Policy, from TechRepublic Premium, describes the organization’s process for minimizing and mitigating the results of an information technology security-related incident. From the policy: Whenever a user of an organization-provided computer, device, system, network application, cloud service or platform experiences a suspected technology-related security incident, the individual must immediately notify the IT ...

One of the key responsibilities of managing employees is helping them develop their careers. And one of the best ways to do that is by establishing clear, measurable objectives toward achieving their goals. This policy offers a simple outline of what qualifies as an acceptable objective and how managers and employees can work toward a ...

Domain Name System and Dynamic Host Configuration Protocol are the foundation of essential network configuration and communication, especially DNS. Internal and external network access could not work as we know it without DNS, and DHCP is invaluable in provisioning temporary IP addresses for workstations and devices to utilize facility connectivity. The purpose of this policy ...

Successful IT departments are defined not only by the technology they deploy and manage, but by the skills and capabilities of their people. IT workers must keep up to date with the latest technology trends and evolutions, as well as developing soft skills like project management, presentation and persuasion, and general management. Due to the ...

Data in transit means data is at risk if the proper precautions aren’t followed. Data stored inside a securely monitored environment is much less likely to fall into the wrong hands than data exchanged between people and systems. With this in mind, it is essential for company personnel to adhere to firm and clear guidelines ...

Ethical behavior is something most people practice every day. It’s rare that an organization will need to enforce an ethics policy, but having one in place is a good idea. This ethics policy from TechRepublic Premium outlines areas where interactions with vendors might be questionable. From the policy: STANDARDS FOR CONDUCT Any short-term benefit gained ...