I am compiling a list of general security policies and procedures at the moment. The following items have been included:
- Acceptable use - this policy defines what behaviors are acceptable and what behaviors are not.
- Internet access - this policy defines whether someone can access internet or not.
- Data classification - this policy defines how open (or secret) data should be.
- Password policy - this policy indicates how password should be chosen.
Can you think of more security policies?