Protect Your Computer System with a Comprehensive Security Policy

The most difficult part of creating a Security Policy for your business is determining what, exactly, to include in it. Never heard of a Security Policy before? You're not alone. But whether you are the only employee in your company or you have a small staff working for you, you need to learn what a Security Policy is, and then you need to create one.

In much the same way that a personnel policy informs employees of things like vacation time accrual, performance review schedule and other personnel-related issues, a Security Policy informs your employees of the steps that are necessary to keep your company's network and computers secure. The policy is your company's rules and regulations that are enforceable, under law if necessary, if breached.

A Security Policy will include rules and formal procedures that are clearly written and laid out. But most importantly, the information contained must be easy for employees of all levels to understand.

And just as it is with young children, the content of your Security Policy must be enforceable, and it must be enforced consistently. Saying in writing that something is not allowed, then allowing it to happen during regular work hours sends mixed messages to your employees. They won't know what really is right or wrong, which will defeat the whole point of your Security Policy. Inconsistent implementation also leaves you open to legal liability.

Like any good policy, your Security Policy should be regularly updated to reflect today's rapidly-changing business environment. Most of the time, you will be the person making these changes. However, if your company is growing and adding staff, this may not always be the case. Make sure the person responsible for updating your company's Security Policy has guidelines and boundaries, and most of all, make sure you read and approve any changes made by someone else.

Make presenting your Security Policy part of your new employee orientation procedure. Make sure every employee reads the policy, signs and dates a document certifying that it has been read, and then keep the signed and dated certification in their respective personnel folder. And every time that your Security Policy is updated, make every employee read it again, and sign and date a document stating that they have read the changes.

The types of topics you may want to cover in your company's Security Policy include but are not limited to:

* What can be loaded onto an employee's computer from floppy disk or CD

* What personal business, if any, can be conducted on the company computer

* Which files or company information is allowed to leave the internal network or is allowed to be sent out over the Internet

* Who is allowed to install new software and software upgrades onto the system, and equally important, who is not allowed to do this

* A password management and password change policy which includes the acceptable length of passwords. Provide examples of permissible/non-permissible passwords. Examples of non-permissible passwords might include date of birth, names of pets, nicknames, children's names, etc.

* Who's allowed remote access to your network from off-site

* Policies for locking keyboard or using password protected screensavers when an employee's PC is left unattended

* Who is allowed to attach their laptop or other portable computing device to the network and what information they are allowed to upload/download

* Guidelines for vendors and other visitors who may need access to your network while they are on-site.

Whether you have one PC or several networked together, you have a lot of money invested. Protect this critical business asset with an iron-clad Security Policy.

Copyright © 2004 Cavyl Stewart. For help with creating your security policy or to find security software or other small business programs, visit: http://www.find-small-business-s oftware.com/hr-software.html - Also, be sure to check out my Exclusive, 100% free ecourses.

---

Using an Appraisal to Benefit Your Organization

PERFORMANCE APPRAISALS BENEFIT THE ORGANIZATION:Appraisals help spot employees with potential for advancement. Appraisals bring attention to the so-called high-potentials - people who have both the will and... Read More

Meeting Your Meeting Expectations

"To get something done a meeting should consist of no more than three people, two of whom are absent." ~Author unknownOne of the complaints I hear most... Read More

Lower the Bar

"Nothing great was ever achieved without enthusiasm." Ralph Waldo EmersonI'm so excited. I got a cool new power point template with orange and yellow flames. It's not... Read More

Organize your Office- Seven Solutions

1. Create a filing system with broad categories such as "Insurance" and then break those categories down further into sub-categories (i.e., car, life, medical), alphabetizing them along... Read More

Creating a Team Working Environment

TEAM DECISION MAKING: Managers who invite participation believe that people directly affected by a decision should be involved in making that decision. The effort is toward joint,... Read More

Whadda Jerk!

If one does not understand a person, one tends to regard him as a fool. Carl Jung Sadly, public discourse today seems to have degenerated into warring... Read More

Get It Done! Soft Skills not Hard Tools are Required

If your organization has people, then interpersonal skills are needed.I work with companies that are on a path they call the lean journey. Whatever you call it,... Read More

The Supervisors 14 Essential Truths For Communicating With Direct Reports

One amazing, but sadly true, fact of today's advances in communication tools is that we really don't communicate much better than in the past.Indeed one recent study... Read More

Know Your Business! - 7 Key Questions You Must Ask

You need to know all that is going on around you to be successful in business, whatever the size of your organization. Yet how do you keep... Read More

The High, High Price of Distrust

A paper manufacturer with over 300 employees once announced that it was planning to move to more spacious and attractive premises thirty miles down the road. When... Read More

Quick Tip - Effective Meetings Earn a Profit

Most people treat meetings as a free resource that can be used to deal with any issue. As a result, huge amounts of time and money are... Read More

3 Reasons Why CRM Strategies Fail

Customer relationship management (CRM) is one of the most effective tools for improving customer relationships and therefore increasing revenue, customer satisfaction, and customer retention. Unfortunately, some CRM... Read More

Why Free Agent Thinking Is Good For Your Company

It's no secret! Day after day the news is riddled with companies who are moving operations to other countries or completely closing their doors. Those who remain... Read More

DIVERSITY is a BIG word -- With A HUGE Business IMPACT

Second thought! Just in case. YOU or someone you personally know may fit the following picture of success which may carry too much risk for comfort.You can... Read More

Increase Productivity: Five Powerful Actions

How can you make the best use of your energy to increase productivity each day? Here are five actions that can increase productivity and leave energy to... Read More

Creativity and Innovation Management ? Hierarchies

Creativity can be defined as problem identification and idea generation whilst innovation can be defined as idea selection, development and commercialisation.There are other useful definitions in this... Read More

Organizational Culture and Creative Blocks ? the Similarities

Few Decision makers see the link between between creativity and innovation management, as performed by MBA's in firms, and creative endeavours such as screenwriting. In fact, there... Read More

What Every Manager Should Know About How to Maximize the Two People Inside

Every one of us, in reality, has two people inside: The person we are today and the person we can become tomorrow and in the future.We go... Read More

Crisis Management Essentials - How to Communicate Effectively During a Crisis, Emergency or Disaster

A crisis, emergency or disaster can happen at anytime and anywhere.Just ask the residents of Darwin in Australia's Northern Territory.Imagine a late afternoon on Christmas Eve thirty... Read More

Well-Defined Processes ? How to Create

Interested in learning how to reduce development time, save money and stay in control? Business professionals can learn how to create well-defined processes with the easy-to-manage Process... Read More

Problem-Solving Success Tip: Use Your Time for Problems that are Truly Important

Use your time for problems that are truly important.Hard as it may be to walk away once you're aware of it, just because a problem is there... Read More

New UK Laws on Staff Dispute Resolution and Disciplinary Procedures

October 2004 saw the introduction of the Employment Act 2002, which has brought a new approach to staff dispute resolution.It has long been acknowledged that disputes in... Read More

The Myth Of Relationship Selling Revealed At Last

The second you quit being the 'best deal' for your customer, he'll drop you like a hot potato. Regardless of how many lunches you've bought him or... Read More

Where Businesses Fall Short

1. No vision. Successful businesses have a clear vision or picture of their business purpose and mission. Your vision serves as a roadmap to help you see... Read More

Employee Retention: Keeping the People Who Keep You in Business

The retention of highly skilled knowledge workers is one of the major challenges today for all organizatons. Knowledge workers are those whose work primarily requires the use... Read More

Lawyers With 2 Hands And Everything Else

I heard this back a few years ago. The boss yelled, "Get me a good lawyer but not the one with two hands!""Huh?" secretary was puzzled.Boss continued... Read More