IT Security Policies

1
IT Security Policies
www.kaonsecurity.co.nz
2
Why are Policies important?

• Computer systems are used by everyone in your
  organisation
• But not everyone is an IT guru

3
Why are Policies important?

• Security Policies are your first line of defence
  from internal and external security threats

4
Why are Policies important?

• 96 of all cyber attacks will fail if users
  follow basic security policies

5
Why are Policies important?

• Where rules and responsibilities are not well
  defined, security will fail

6
Why are Policies important?

• They provide consistent guidelines for computer
  users, managers and technical staff

7
Why are Policies important?

• Managing IT without security policies is like
  driving a car without a steering wheel

8
Why are Policies important?

• They protect vital government information and the
  systems that store it

9

• They are not just a concept to placate Auditors

10

• Policies that are copies of best practice guides
  are like diet and exercise manuals
• something to aspire to that is never achievable

11

• Talking about Best Practice Guides
• What are ISO 17799 and SIGS and what do these
  have to do with Sarbanes Oxley, Cobit and Itil?

12

• Ill get around to writing IT policies one day
• Yeah Right!!!

13

• And anyhow
• Hardcopy policies kept on the back shelf of the
  computer room will never be read

14

• Let me introduce you to
• THE FAKE CHICKEN COMPANY

15
(No Transcript)