| |
| | Computer and Information Security Policy (Site not responding. Last check: 2007-10-16) |
 | | IT security policy may be met with a degree of skepticism unless given appropriate visibility and support by top management, and that visibility and support should be clearly and energetically reflected in the program-level policy and in its emphasis on employee participation. |
 | | Personnel Security: Depending on the types of activities being performed, degree of data sensitivity to be encountered, and sheer numbers of personnel, specific security policies related to personnel screening, requirements, hiring, training, evaluating, and firing may need to be developed and administered. |
 | | Policy cannot merely be pronounced by upper management in a one-time statement or directive with high expectations of its being readily accepted and acted upon. |
| www.windowsecurity.com /whitepaper/info/policy/hk_polic.html (3883 words) |
|