Network security policy

This article needs additional citations for verification. Please help by adding citations to reliable sources. Unsourced material may be challenged and removed. Find sources:  –  ·  ·  · scholar · JSTOR (April 2010) (Learn how and when to remove this template message)

This article's tone or style may not reflect the encyclopedic tone used on Wikipedia. See Wikipedia's guide to writing better articles for suggestions. (April 2010) (Learn how and when to remove this template message)

A network security policy (NSP) is a generic document that outlines rules for computer network access, determines how policies are enforced and lays out some of the basic architecture of the company security/ network security environment.^[1] The document itself is usually several pages long and written by a committee.

A security policy a very complex document, meant to govern data access, web-browsing habits, use of passwords and encryption, email attachments and more. It specifies these rules for individuals or groups of individuals throughout the company.^[2]

Security policy should keep the malicious users out and also exert control over potential risky users within an organization. The first step in creating a policy is to understand what information and services are available (and to which users), what the potential is for damage, and whether any protection is already in place to prevent misuse.

In addition, the security policy should dictate a hierarchy of access permissions; that is, grant users access only to what is necessary for the completion of their work.

While writing the security document can be a major undertaking, a good start can be achieved by using a template. National Institute of Standards and Technology provides a security-policy guideline.

The policies could be expressed as a set of instructions that could be understood by special purpose network hardware dedicated for securing the network.

See also[]

• Internet security
• Security engineering
• Computer security
• Cybersecurity information technology list
• Network security
• Industrial espionage
• Information security
• Security policy

References[]

External links[]

• Computer Security Resource Center at National Institute of Standards and Technology