1

I am compiling a list of general security policies and procedures at the moment. The following items have been included:

  • Acceptable use - this policy defines what behaviors are acceptable and what behaviors are not.
  • Internet access - this policy defines whether someone can access internet or not.
  • Data classification - this policy defines how open (or secret) data should be.
  • Password policy - this policy indicates how password should be chosen.

Can you think of more security policies?

closed as off-topic by Michael Durrant, mutt, jruberto, IAmMilinPatel, Bharat Mane Mar 22 '17 at 5:53

  • This question does not appear to be about software quality assurance or testing within the scope defined in the help center.
If this question can be reworded to fit the rules in the help center, please edit the question.

1

Can you think of more security policies?

  1. Minimum access, this policy limits access to a need to know basis.
  2. Network access, this policy limits who can access a network.
  3. VPN access (remote access), this policy limits who can access a network via VPN remotely.
  4. User account management, this policy decides who can create, delete accounts.
  5. Configuration and Change Management, this policy decides who can modify configurations.
  6. Server security, this policy indicates how a server should be managed.
  7. Mobile devices, this policy shows how laptops, smartphones are managed as they are easily stolen.
  8. Guest access, how a guest can access information
  9. Meltdown procedure, when security is breached, what should we do?

There are more policies out there. Above are all I can think of.

Not the answer you're looking for? Browse other questions tagged or ask your own question.