This policy from TechRepublic Premium outlines the measures the organization is taking to ensure protection of its confidential information, including the imposition of a contractual obligation in the form of a nondisclosure agreement. From the policy: In the course of doing their work, employees and independent contractors may receive, view or interact with information comprising ...

Personnel screening involves analyzing the background of company applicants to ensure that they are a creditable fit for the role in which they intend to work. The process may entail analysis of criminal records, credit history, employment/academic verifications, job skills and other criteria. This policy from TechRepublic Premium provides a framework for building a screening ...

This ACH payment process policy from TechRepublic Premium describes the procedures an organization and its representatives must use when paying any approved invoice from authorized vendors, suppliers, consultants, contractors, government agencies, or other authorized products, services or tax authorities via a manual electronic payment. This policy can be customized as needed to fit the needs ...

Employees who work from home often use company-supplied systems and devices, which helps ensure that they have consistent, state-of-the-art equipment to do their work. However, organizations should provide usage guidelines, such as this policy from TechRepublic Premium, covering the responsibilities of IT staff and employees. From the policy: For an organization to properly implement this ...

Shadow IT is a concept whereby an organization’s employees use technology, services or systems without the knowledge of or approval from the IT department. This policy from TechRepublic Premium provides guidelines for the appropriate use of shadow IT, explains the restrictions that will apply to it, and defines elements pertaining to employee and IT department ...

This policy from TechRepublic Premium provides guidelines for the effective and secure configuration and administration of wireless networks in the business. You can customize it to fit the needs of your organization. From the policy: SUMMARY Wireless networks can greatly aid organizations by providing easy connectivity for workers, whether internal employees or external guests. Many ...

This policy from TechRepublic Premium provides guidelines for the effective and secure configuration and management of web servers. Because there are many types of web servers running on various operating systems, this policy is not intended to serve as a step-by-step technological guide but rather an overall series of platform-independent guidelines. Consult vendor documentation for ...

The purpose of this policy from TechRepublic Premium is to provide guidelines for the appropriate use and administration of storage area networks. This policy can be customized as needed to fit the requirements of your organization. From the policy: SUMMARY SANs provide manageable, centralized storage capacity for systems offering vast amounts of disk space via ...

This policy from TechRepublic Premium provides guidelines for the consistent and secure management of passwords for employees and system and service accounts. These guidelines include mandates on how passwords should be generated, used, stored and changed as well as instructions for handling password compromises. From the policy: GENERAL REQUIREMENTS Blank or easily guessed passwords, such ...

This policy from TechRepublic Premium provides guidelines to safeguard company information, reduce business and legal risks and protect company investments and reputation. It covers data. Its adjunct policy, the Network security policy, covers the systems and devices that transport and store data. This policy can be customized as needed to fit the needs of your ...

This policy will help your organization safeguard its hardware, software and data from exposure to persons (internal or external) who could intentionally or inadvertently harm your business and/or damage physical assets. From the policy: PHYSICAL SECURITY GUIDELINES AND REQUIREMENTS The following guidelines should be followed in designing and enforcing access to IT assets. Server room/IT ...

The purpose of this policy from TechRepublic Premium is to provide guidelines for the practice of whistleblowing to ensure unethical and/or illegal acts can be investigated, and guilty parties punished to protect the organization and its employees. This policy can be customized as needed to fit the needs of your organization. From the policy: A ...

Data breaches can cost companies tens of thousands of dollars or more and can pose a significant risk to company operations and reputation. Customer information is usually one of the favorite targets of hackers as it entails confidential details which can be used to commit property or identity theft. Even innocent mistakes such as a ...

When employees suffer accidents or illnesses, it may become necessary for them to take a leave of absence on a short-term basis. Offering short-term disability insurance for your employees enables them to remain free from worry about earning an income if they are sick or injured. This, in turn, makes the business an attractive employer ...

This policy from TechRepublic Premium will help you create security guidelines for devices that transport and store data. You can use it as-is or customize it to fit the needs of your organization and employees. From the policy: The IT department will be responsible for implementing, adhering to and maintaining these controls. For the purposes ...