Writing Information Security Policies

Summary

Internet security policies can be difficult to write because the technology changes so quickly. Rather than create one policy, the policy writer can approach Internet security policies by dividing the technologies into logical groups and developing policy statements for each area.

1. Understanding the door to the Internet:

   • Prior to writing Internet policies, it is necessary to understand a number of issues that will be affected by those policies. The first issue is to understand the basics of the architecture and how the firewall and network address translation can play a role.

   • The next step is to understand the services that can pass through this gateway. To understand what to consider, it might be helpful to classify services by protocol ...