Comments on: USB port control policy http://itknowledgeexchange.techtarget.com/itanswers/usb-port-control-policy/ Mon, 22 Mar 2010 13:44:53 +0000 http://wordpress.org/?v=2.6.2 By: KevinBeaver http://itknowledgeexchange.techtarget.com/itanswers/usb-port-control-policy/#comment-60049 KevinBeaver Wed, 18 Feb 2009 15:23:40 +0000 #comment-60049 You definitely need to get the right people on board and determine the underlying business issues before putting a policy in place. Otherwise, it'll just for show, people will ignore it, and it won't be enforceable. Effective security policies have the following sections: #Introduction #Purpose #Scope #Roles and responsibilities #Policy statement #Exceptions #Procedures #Compliance #Sanctions #Review and evaluation #References #Related documents #Revisions #Notes Also, check out my other articles on security policies I've written for TechTarget and others at www.principlelogic.com/policies.html. You definitely need to get the right people on board and determine the underlying business issues before putting a policy in place. Otherwise, it’ll just for show, people will ignore it, and it won’t be enforceable. Effective security policies have the following sections:

#Introduction
#Purpose
#Scope
#Roles and responsibilities
#Policy statement
#Exceptions
#Procedures
#Compliance
#Sanctions
#Review and evaluation
#References
#Related documents
#Revisions
#Notes

Also, check out my other articles on security policies I’ve written for TechTarget and others at <a href="http://www.principlelogic.com" title="http://www.principlelogic. " target="_blank">www.principlelogic.com</a>

]]>