Security policies address network, systems and data security to ensure the continued confidentiality of data, the continued integrity of systems, accuracy of data, and that data is available to a company’s staff as required.

The foundation of an effective information security program is built on strong information security policies that are in balance with business operations. Information security policies should define a concise set of behaviors that provide a secure and enabling environment in which a company may use and manage its information resources with protection from data loss, service disruption, misuse or unauthorized access.

The policy for an effective information security begins with the philosophy of “that which is not explicitly allowed is explicitly denied”.

OurTech has developed a comprehensive set of best practice “Information Security Policies” to help companies with establishing and enforcing policy compliance. You may view a sampling of these reports by clicking on the sample pages:

You must have Adobe Acrobat Reader plug-in installed to view the policies.  If you do not have the plug-in, you can download it here.

IT Policies Table of Contents
IT Policies Overview
IS002:  Personnel Assignments and Functions
IS006:  Internet Access and Use
IS008:  Information Technology Resources
IS009:  Information Security Program
IS011:  Security Review and Audit
IS013:  Personnel Security
IS014:  Customer Service and Online Privacy
IS016:  Network Operations
Intrusion Report
Statement of Understanding
Reference Materials

   [Newsletter Archive]