Protect Your Computer System with a Comprehensive Security Policy
The most difficult part of creating a Security Policy for your business is determining what, exactly, to include in it. Never heard of a Security Policy before? You're not alone. But whether you are the only employee in your company or you have a small staff working for you, you need to learn what a Security Policy is, and then you need to create one. In much the same way that a personnel policy informs employees of things like vacation time accrual, performance review schedule and other personnel-related issues, a Security Policy informs your employees of the steps that are necessary to keep your company's network and computers secure. The policy is your company's rules and regulations that are enforceable, under law if necessary, if breached. A Security Policy will include rules and formal procedures that are clearly written and laid out. But most importantly, the information contained must be easy for employees of all levels to understand. And just as it is with young children, the content of your Security Policy must be enforceable, and it must be enforced consistently. Saying in writing that something is not allowed, then allowing it to happen during regular work hours sends mixed messages to your employees. They won't know what really is right or wrong, which will defeat the whole point of your Security Policy. Inconsistent implementation also leaves you open to legal liability. Like any good policy, your Security Policy should be regularly updated to reflect today's rapidly-changing business environment. Most of the time, you will be the person making these changes. However, if your company is growing and adding staff, this may not always be the case. Make sure the person responsible for updating your company's Security Policy has guidelines and boundaries, and most of all, make sure you read and approve any changes made by someone else. Make presenting your Security Policy part of your new employee orientation procedure. Make sure every employee reads the policy, signs and dates a document certifying that it has been read, and then keep the signed and dated certification in their respective personnel folder. And every time that your Security Policy is updated, make every employee read it again, and sign and date a document stating that they have read the changes. The types of topics you may want to cover in your company's Security Policy include but are not limited to: * What can be loaded onto an employee's computer from floppy disk or CD * What personal business, if any, can be conducted on the company computer * Which files or company information is allowed to leave the internal network or is allowed to be sent out over the Internet * Who is allowed to install new software and software upgrades onto the system, and equally
important, who is not allowed to do this * A password management and password change policy which includes the acceptable length of passwords. Provide examples of permissible/non-permissible passwords. Examples of non-permissible passwords might include date of birth, names of pets, nicknames, children's names, etc. * Who's allowed remote access to your network from off-site * Policies for locking keyboard or using password protected screensavers when an employee's PC is left unattended * Who is allowed to attach their laptop or other portable computing device to the network and what information they are allowed to upload/download * Guidelines for vendors and other visitors who may need access to your network while they are on-site. Whether you have one PC or several networked together, you have a lot of money invested. Protect this critical business asset with an iron-clad Security Policy. Copyright © 2004 Cavyl Stewart. For help with creating your security policy or to find security software or other small business programs, visit:
http://www.find-small-business-software.com/hr-software.html -
Also, be sure to check out my Exclusive, 100% free ecourses.
Related News
|
 |
|
|
RELATED ARTICLES
Want to Manage Your Time? Get Real!
You know the drill - the ridiculous deadlines, the relentless barrage of email, voicemail, phone calls, all those "got a minute" interruptions, the constant worrying that one of those many balls you're juggling is going to unexpectedly drop.
Change Behaviors, Change Performance
Every organization is looking for the holy grail of performance enhancement, that one thing that, if it were changed even slightly, would push the productivity of a company way beyond the current level.
Strategic Clarity for Communication Management
Over the past few weeks I've been developing plans for a communication project, a media relations campaign.
Tales From the Corporate Frontlines: Managerial Influence
This article relates to the Manager/Supervisor competency, commonly evaluated in employee satisfaction surveys. This competency evaluates an employee's feelings regarding their direct manager or supervisor. The manager/supervisor competency covers topics like clarity of goals, manager support, coaching and feedback, and regular reviews of performance. The old adage that "people leave their managers, not organizations" is often true. Of all the workplace stressors, a bad immediate manager is one of the worst and will directly impact the emotional health, productivity, and retention of an employee. This competency can be especially insightful if your organization is losing quality employees while your compensation and benefit packages are equivalent with industry standards.
Stop Going to Meetings - 10 Questions to Ask Before Attending a Meeting - Get More Productive
We get invited to attend so many "meetings" but do we need to attend them all? Use these 10 questions to assess if you should attend that next meeting invitation.
Service Level Agreement (SLA) Boot Camp
Service Level Agreements, or "SLA's" are tricky but useful mechanisms for managing the risk of an on-going relationship with IT service providers. Unfortunately, most SLA's that show up in service contracts as worthless, cosmetic paper additions. SLA's can be extremely powerful tools to help you and your service provider get the most out of a relationship.
3 Reasons Why CRM Strategies Fail
Customer relationship management (CRM) is one of the most effective tools for improving customer relationships and therefore increasing revenue, customer satisfaction, and customer retention. Unfortunately, some CRM strategies fail. This leaves CRM vendors and their customers baffled, but there a few common reasons why a CRM strategy will fail.
Creativity and Innovation Management ? Feasibility
Creativity can be defined as problem identification and idea generation whilst innovation can be defined as idea selection, development and commercialisation.
Jack Welch--Success Is Getting Back Up on the Horse
A few months ago I had the opportunity to spend a few minutes with Jack Welch, past CEO of GE. A fantastic opportunity.
Its All About The Customers, Baby
If you want to ensure a steady stream of customers in your business, you must always remember why you're in business in the first place.
Turbo-Charge Your Rollout with ERM
Employees are the often-neglected stakeholders in the success or failure of a CRM (Customer Relationship Management) initiative. But employees don't always resist new ways of doing business. If you factor in relationship management practices that engage people in the change process, you can circumvent significant resistance and actually speed up implementation.
Communication Mix-Up
My friend Delia is the owner of a small private school. This spring her school is experiencing the crunch of reduced enrollment for next September and all staff have been asked to take a six percent salary decrease. One staff member, much to Delia's horror, outright refused and resigned her teaching position at the school. Delia pleaded with her, telling her how valuable a teacher she was, how parents had come to count on her expertise, and essentially how the school couldn't operate without her. The next day she had reconsidered resigning her teaching position, saying that it was because of what Delia had said regarding how valuable she was to the school.
Leadership: Stoking The Success Train
Everyone wants to succeed yet everyone has a different perception of what success means and what it will bring into their lives. It is a means of gaining financial freedom for some and for others it means a healthy, happy family life. There are others who define their success by the power that their job title brings and others who feel successful when they believe their leadership skills excel above others.
How To Use Outsourcing To Beat Your Competition
Outsourcing is when you hire outside professionals or
services to take on part of your business workload. You
may want to outsource part of your work because you
don't have the room, you need an expert, you have periodic
busy periods, or you need more production to get orders
out on time etc. You could outsource accounting,
secretarial tasks, factory help, computer training, web
design etc. Below are ways to use outsourcing to beat
your competition.
3 Keys to Being a Fearless Executive
In my work with business executives, I have come to the conclusion that most individuals in positions of influence got there accidentally. This may sound harsh to those of you in the business world reading this article, but the truth CAN be harsh, much like the medicine our mothers gave us as young children. There is a bright side, however, to this fact: Those of you who put in the effort can rise far above the average executive. Here are three tips to do that, and quickly:
Smart Choices: How to Hire the Best
Your organization's continued growth and success depend on making smart choices and hiring the best. Today's economy is exploding with talent, allowing you to be selective about the staff you hire. Yet, the crucial step to filling a position is finding the right talent for your organization - someone that has the skills for the job, easily blends with the culture, interacts well with the team and believes in your mission.
Keep Your Good Workers by Building Good Leaders
A recent report from the American Hospital Association's Commission on the Workforce asked healthcare workers key questions about the performance of their front line managers. The study concluded that an employee's decision to stay with or leave an organization is primarily based on his or her relationship with an immediate supervisor. No matter what industry or setting or company size, effective leaders:
Possess personal integrity.
Can easily adapt to change.
Work to build the talent of others.
Communicate well with their people.
Have the ability to build and lead a team.
Can analyze problems and create solutions.
Encourage a collaborative work environment.
Five Ways to Develop More Effective Front Line Managers:
Encourage and give managers time to attend leadership courses. Learning and growing is part of their job.
Develop an approach to hire and assess managers based on the above key competencies, not on old job descriptions.
Reward effective leadership on a regular basis whether it is through a "Manager of the Month" award or free movie tickets.
Get creative with training. Start peer coaching groups - managers with similar levels of authority meet once a month to discuss challenges in managing people, dealing with organizational politics, or other thorny issues.
Do short reviews every three to six months to catch performance problems before they blossom into big leadership headaches. When problems are identified, action plans should be put into place to rectify the issue before the next appraisal.
Time Management and Team Development - The Yes and No of It
Sometimes.
Recognition: A Quick, Low-cost Way to Motivate Employees
Recognizing good performance through praise or other positive action is one of the simplest and most cost-effective ways to motivate people. It provides three major benefits:
It lets people know that their performance was valued, and increases the likelihood that they will continue to perform well.
It builds confidence so that people are willing to try new things, and develop further in their jobs.
It leads to greater job satisfaction which in turn builds commitment to the manager and the employer.
The Ten Keys to Maximizing Employee Performance
1. Let people know what you expect. If people know what's expected of them, that's what they'll do--if they don't know what's expected, they'll do something else. Communicate clear and unambiguous performance expectations and hold people accountable for their achievement.
|
