Network Defense and Countermeasures: Principles and Practices, 4th Edition

Chapter 11

Security Policies

Chapter Objectives

After reading this chapter and completing the exercises, you will be able to do the following:

• Create effective user policies.

• Outline effective system administration policies.

• Define effective access control.

• Generate effective developmental policies.

Introduction

Throughout this book we have occasionally mentioned the topic of policies; however, our primary focus has been on security technology. Unfortunately technology alone is not a panacea for network security problems. One reason is that technology cannot be effective if people do not follow appropriate procedures. Examples of this include:

• Virus software won’t prevent a user from manually opening an attachment and releasing a virus. ...