Auditing and logging are essential measures for protecting mission-critical systems and troubleshooting problems. This policy outlines the appropriate auditing and logging procedures for computer systems, networks and devices that store or transport critical data. From the policy: Many computer systems, network devices and other technological hardware used in the enterprise can audit and log various ...

Without appropriate access management controls, businesses are at significant risk from the loss or theft of both physical and digital assets. Access management controls establish who is allowed the appropriate level of access in order to do their jobs, while reducing the potential for damage or harm to the company. The purpose of this policy ...

IT pros typically have access to company servers, network devices and data so they can perform their jobs. However, that access entails risk, including exposure of confidential information and interruption in essential business services. This policy from TechRepublic Premium offers guidelines for governing access to critical systems and confidential data. From the policy: SUMMARY IT ...

Maintenance tasks, equipment upgrades and installations must be completed regularly — potentially creating disruptions and preventing employees from doing their work. This policy is designed to help your organization determine procedures for scheduling and communicating server, system and network downtime with the goal of minimizing the impact and inconvenience for your staff, clients and contractors. ...

This policy outlines the measures the organization is taking to ensure protection of its confidential information, including the imposition of a contractual obligation in the form of a nondisclosure agreement. From the policy: SUMMARY A nondisclosure policy protects an organization’s confidential information from exposure to persons outside or inside the organization who could intentionally or ...

This policy defines what systems and services to monitor, establishes how they will be monitored, and determines how support staff will be notified of problems that require escalation or remediation. From the policy: SUMMARY Maximum uptime is often a priority goal for company systems and services in today’s 24/7 year-round society. With that objective in ...

This policy describes guidelines your organization can follow to track, process and decommission IT equipment. From the policy: SUMMARY An organization’s IT hardware inventory constitutes a significant capital investment in order to perform company operations. Because hardware represents a critical asset and often holds organizational data, it is important for the company to track each ...

Third-party cloud-based file storage applications such as Dropbox, OneDrive and Google Drive have all contributed to the success of business cloud data storage. These products have brought proven flexibility and ease of data access to users and businesses alike while ensuring security of confidential information. Cloud data storage offers many benefits to consumers and companies ...

This policy provides guidelines for reclaiming and reusing equipment from current or former employees. It outlines the steps that must be carried out by authorized individuals before this equipment can be considered safe to reassign. The following checklist will help ensure that all the appropriate steps are taken for equipment reassignment. From the policy: ASSET ...

It’s common practice for companies to use contractors to offload work to specialized individuals or reduce costs associated with certain tasks and responsibilities. This can free up in-house staff to focus on more complex and valuable initiatives. The advantages to this practice go hand in hand with the need to carefully assess the conditions under ...