Companies often use polices from other organizations, or hire security companies who use a "one-template-fits-all" approach without considering unique customer requirements. These policy development approaches can prove pointless and impossible to enforce.

It is important to create correct policies, develop best practice solutions and educate staff in proper security practices.

Drawing up Policies

Policies should not be designed using one-size-fits-all. Every environment is different, with it's own complexities and challenges. The environment should dictate the policies and not the other way around.

One has to also consider the current awareness of employees, legislative requirements and how the staff will react to policy changes. For example, if the employees depend on Internet research and a policy is implemented where anyone caught surfing inappropriate content will be immediately terminated, employees might be reluctant to use Internet as a simply typing error may bring up a site containing inappropriate content.

NetSieben through a process of consultation considers all the company's requirements, the unique risks and challenges the company faces including current regulatory requirements, and then helps the company to formulate policies that fit the organization.

Training Staff

Security policies are of little use if the staff chooses not to practice them. Company management needs to understand how best to enforce such policies, as defined in rule sets such as "Acceptable Usage" or "Information Access".

In addition other security procedures need to be well documented such as the procedures at the time of hiring and termination; how to deal with personal laptops entering the premises and consultants plugging into the company network.

NetSieben will train the staff in security policy management giving key ideas on how to best enforce security policy within the corporate environment, using both automated and manual options.

For more information or pricing please call us at (303) 543-0300 or fill out this secure form.