Cisco Network Design Solutions for Small-Medium Businesses

The Importance of Having a Security Policy

Implementing security solutions without having a security policy (either explicitly defined or at least implied) represents at best a haphazard approach to addressing network security issues. It is preferable to have a network security policy in writing, with input into the policy coming from the groups of stakeholders identified in Chapter 1. Figure 4-2 depicts the impact of security policy on implementation of security solutions.

Figure 4-2. Impact of Security Policy on Security Solutions Implementation

A security policy should define the security goals that an SMB aspires to with respect to its computer ...