Describe the issue-specific security policy (ISSP) and list three issues it may cover.
What will be an ideal response?
The issue-specific security policy (ISSP), which requires frequent updates, addresses specific areas of technology, stating the organization's position on each issue. Here are some of the issues it may cover:
· Use of company-owned networks and the Internet
· Use of telecommunications technologies (fax and phone)
· Use of e-mail
· Specific minimum configurations of computers to defend against worms and viruses
· Prohibitions against hacking or testing organization security controls
· Home use of company-owned computer equipment
· Use of personal equipment on company networks
· Use of photocopy equipment
You might also like to view...
Which of the following statements is correct to create a DataOutputStream to write to a file named out.dat?
a. DataOutputStream outfile = new DataOutputStream(new File("out.dat")); b. DataOutputStream outfile = new DataOutputStream(new FileOutputStream("out.dat")); c. DataOutputStream outfile = new DataOutputStream(FileOutputStream("out.dat")); d. DataOutputStream outfile = new DataOutputStream("out.dat");
The software developer retains the copyright, but gives blanket permission to download ____ software from the Internet, install it, copy it multiple times, and give copies to friends.
A. shareware B. freeware C. commercial D. demo