
Power Up Your Small-Medium Business
(104)
participation from IT, human resources (HR), legal, administrative, and executive
teams. The elements of a security policy include the following:
• A concise statement describing the purpose of the policy document and
how updates will be handled
• A description of the policy’s scope of information and covered resources
• Roles and responsibilities for employees
• Security practices regarding network design, third-party connections,
remote access, name/password management (including provisions for
when an employee leaves the company), and so on
• Acceptable use policy (AUP) for network and Internet access
•