Create Sign Presentation Secure

Create Sign Presentation Secure

okay I'm moving Pierson I'm going to take you through some information security policies the importance the design and why we have it then what's the benefit of policies and how long it's going to take or how long it should take and these issues we're going to actually look at a quick objective create a virtual organization so we understand when we develop and look at the complexities of these organization and develop a plot how we're going to do the frameworks and look at that I'm going to develop some policies look at that as an example and then frameworks specific policies key policies the must we'll look at that for example software security the development in organizations and I've got examples of different banks one bank says you have to use this the other bonuses you can use what you want but with certain limitations software development change control data security communication security and organization specifically remote access is important and then physical security is one of our layers and we'll also look at compliance monitoring versus enforcement of those policies because the users have to know what they signing they have to show that they actually understand that and you have to then lodge that signature against that policy for any future reference organizational policy statement from the top-down approach policy roll out how you going to do that in a moment organization and then also we need to understand the differences between policies standards procedures and their maintenance now a virtual company which will start off with these let's call it XYZ it's a multinational organization so distributed over a couple of continents we're looking about 36,000 users with computer access remote access specifically for road warriors or technical support has been enabled it is a bank let's take three countries England South Africa where the head office is located and the Americas now what you'll immediately understand when you look at is there might be some legal ramifications around different continents large compliments of these users or contractors it's a disparate environment with tcp/ip communication protocol now before we start let's look at a quick differences what our information system security policies before we have the policy there are certain documentation that forms the support infrastructure for policies we have a standard and a standard is something we can measure usually this is the what the procedure is the how how do we get there is a step by step process identifying an end result and procedures often are used for disaster recovery planning how to build a system and so on a policy for me is a statement of intent I usually call it it's the companies or the enterprise law however it can never override actual law then we have a guideline which is a nice to have and then a baseline if you haven't heard of that baseline basically is the minimum security standard required when for example bullying I serve...