Network Security Architectures

Chapter 2. Security Policy and Operations Life Cycle

This chapter covers the following topics:

• You Can’t Buy Network Security

• What Is a Security Policy?

• Security System Development and Operations Overview

A policy is a temporary creed liable to be changed, but while it holds good it has got to be pursued with apostolic zeal. —Mohandas K. Gandhi, letter to the general secretary of the Congress Party, India, March 8, 1922

You do the policy. I’ll do the politics. —Dan Quayle, U.S. Vice President (1988–1992), remark to aide, quoted in International Herald Tribune, Paris, January 13, 1992

Many in security today view security policies as a necessary evil, but what is it about security policies that fills us all (myself included) with dread? Is ...