The ideal policy
Posted by PC in Security, tags: Information technology, policy, SecurityComputer and Internet policy in the workplace, Part 2: The Ideal Policy
The ideal policy must balance productivity. It has to focus on actual results of policy change, not a theoretical ideal. First, you need to identify what problem you have that you want to develop policy to solve. Policy for the sake of policy is worthless. Once the problem is identified, say your employees are spending too much time on webmail, then develop a policy to counteract it, working in small steps at first. Next, evaluate your small-step policy change. If it has accomplished what you set out to do, then do not proceed any further. If it has not, then take another small step. The goal is to rarely backtrack on policy. If you have to backtrack then people will lose respect for the policies you implement and further policies will need to be even more drastic in order to have any effect. Read the rest of this entry »






Entries (RSS)