Cisco Security Agent

Creating Policy

Policy means different thing to different people. To security practitioners and auditors, the word policy typically refers to a document that outlines how an organization plans to secure both physical and informational assets. This document is a living document that is ever changing as the business evolves, acquisitions occur, applications are deployed, and systems are installed.

Policy can also refer to the implemented rule sets of a product that is meant to enforce those rules. You will often hear of the rule set implemented by a firewall as the firewall policy. The CSA also implements a policy in the same manner as the firewall. The local CSA agent software monitors system usage and prevents actions requested by the user or ...