Operation security
alokreddy
lazarosrspns.docxI will be explaining the importance of information security policies as well as the hinderances that can be caused by some of these policies. This discussion will be concerning the scenario that there is no Internet use policy in the organization as well as implementations of other polices.
Internet use policy is essential in an organization to make sure the information is correctly protected. Allowing employees to use the internet in any way they want can lead to the downfall of the whole organization. This can happen downloading files with malware which can affect a user’s computer but then can jeopardize the company’s entire system. Having an Internet use policy puts control to what is done online greatly minimizing damage that the employee can do. The downside to Internet use policy would be too much restriction to where it would hinder availability for the employee to perform their role.
External device use policy must be implemented with only allowing approved devices that would be secured to make sure company data is protected. Allowing an external device would be a hinderance to the organization if the device was not properly secured to protect the data and network traffic on the device.
Employee identity (ID) policy is a very important policy to be able to identify each individual employee which uses nonrepudiation. This policy would only help given that it assists in knowing who is responsible for what situation which in turn make sure it is corrected for the future.
Computer use policy is extremely important, it is similar to internet use policy. This policy is important to prevent employees from installing any unauthorized software to the organizations systems which could contain code with the intent of damaging or stealing the organizations information. A downside to this policy for the organization is if they use a certain program to complete their tasks but are unable to do so due to excessive restrictions this could cause a negative impact in the performance of the organization.
Security policies are crucial to keeping an organization running and data safe. Security policies can also create too many restrictions and hinder the company’s ability to function. If the company’s policies are too secure then the employee can not perform their normal tasks. The importance is finding a balance with security to protect the system and availability to allow employees to complete their required tasks for their organization.
References
