What is a security policy

A Security Policy identifies the rules and procedures for all individuals accessing and using assets and resources of an organization. Is a model of organization culture in which rules and procedures that follows the proper use of information and equipment, basically all involving any interaction with any kind of potential hazard to the integrity of the information.

The objectives of a security policy is the preservation of confidentiality, integrity and availability of a systems and information user by their members. The three principles are

  • confidentiality: protection against unauthorized entities
  • integrity: ensures the modification of assets is handled in a specified and authorized manner
  • availability: the state of the system hace continuous access
The security policy is a document that specifies in various sections from regulations of government to warnings of how to use the equipment you are given in your office.

We as a society need to figure out the best ways not only to have a document like this in your organizations but also in our daily basis. An example of not using properly technology can be find in most of the router homes in our country or the personal computers and cellphones, people doesn't have the proper care of all the technology that is now surrounding us.

Comments

Post a Comment

Popular posts from this blog

Ethical hacking

Image
The ACM in 1992 adopted the ACM Code of Ethics and Professional Conduct, it consist of 24 statements of personal responsibility. Some of them are: Contribute to society and human well being, Avoid harm to others, Be honest and trustworthy, Respect privacy to others, Honor confidentiality, etc. Some of them involve more professional topics like: Strive to achieve highest quality, Acquire and maintain professional competence, Know and respect existing laws, Honor contracts, agreements and assigned responsibilities, etc. To the full article you can check this website  https://www.acm.org/about-acm/acm-code-of-ethics-and-professional-conduct#sect1 . Here are some existing and really serious example of some of the statutes written in the code of ethics that this author believes is important for the reader: 1) don't spy the work of others 2) Respect the plants   3) Don't harm other ppl 4) Don't enter the girls bathroom 5) Be careful with the water, you ca...
Read more

Authentication and Access Control

Image
Authentication in this days is not only having a password, today in a distributed client server a user might have several client programs running on her desktop which access server programs uses remote computers across a network and in such environment, the server must authenticate the client run on behalf of a legitimate user. Modern computer systems provide services to multiple users and require the ability to accurately identify the user making a request. From services like banks or assurance, is not enough to verify a given password because in a network, its a package that can be intercepted and subsequently used to impersonate a user. Nowadays, servers save the behaviour of the users and can detect an abnormal state in the way a person interacts with the system and can activate a flag that it may be an attacker. Also now the cryptography is an essential tool in the network communication because it can be a intercepted package, but if you dont have the acces key or the security...
Read more

PGP Security!

Image
The PGP (Pretty Good Privacy) is a crypto system that combines symmetric and asymmetric techniques of encryption, developed by Phil Zimmermann which goal was to protect the distributed data across the internet with a digital signature or key. PGP offers authentication of messages and verification of it's integrity in case the message has been compromised and to know if the message has been read by the person that is supposed to. This is the tutorial I followed, in this video you can check how to send a encrypted message and how to decrypt. ( http://notes.jerzygangi.com/the-best-pgp-tutorial-for-mac-os-x-ever/ )
Read more