Ten Steps to Effective Web-Based Security Policy Development and Distribution

Abstract

Paper, dust, obsolescence. Affectionately known as shelfware are the magnificent binders filled with reams of outdated policies, procedures, standards, and guidelines. Many times, the only contribution to effective security these binders have is to increase the security risk by having more to burn during a fire! Many times, these documents are the proud creations of the security department, but they have little impact on the end user who is posting his password on his terminal or leaving confidential documents laying on his desk. The documents are typically voluminous, and who will take the time to read them? Simple answer: the same people who read their complete car owner's manual before they put the key into the ignition for the first time — definitely a small segment of the population (not sure we want these individuals driving either).