Special Edition Using Linux®, Sixth Edition

Network Security Policy

Possibly the greatest failing of most companies is the lack of a coherent network security policy. A good policy explains clearly the network policy, penalties for violation of the policies, and enforcement guidelines (what happens to violators). This policy must apply to all—equally. A synthesis of this policy (two or three sentences) needs to be posted on Web and FTP sites to warn guests.

But the document should not focus on the prohibitive or the punitive side. Rather, a good policy needs to cover the actions that are to be taken, as well as when and by whom, when your security is at risk. Furthermore, it needs to cover a reasonable timeline for the eventuality that someone, somewhere will at least attempt to penetrate ...