Mastering™ Network Security, Second Edition

B.2. The Developmental Process

The process of fine-tuning the network usage policy for a specific organization goes through many phases:

Discovery

This first step is ideally performed with input from all levels of an organization that use the network. This not only provides a comprehensive policy, but eases employee support and education efforts. Here are some typical questions that you need to answer:

• Which company roles (or individuals) need access?

• Which specific network services do they need?

• What are the current methods of access (including time and location)?

• Which core business applications are Internet-integrated?

• What constitutes sensitive data?

• What are the measurable productivity goals, and how do network resources achieve those goals? ...