Presentation given to advocate other IT firms creating/updaing IT policy for their client

1. The Fulcrum GroupAcceptable Use Policies By Steve Meek, CISSP, MCSE, CCNA

2. Agenda Definition Why companies don’t have policies End Company Benefits Policy Guidelines Why we want to provide to clients Planning policies Resources to help Discussion

3. Definition a set of rules applied by the owner/manager of a network, website or large computer system that restrict the ways in which the network site or system may be used. AUP documents are written for corporations,[1] businesses, universities,[2] schools,[3] internet service providers,[4] and website owners[5] often to reduce the potential for legal action that may be taken by a user, and often with little prospect of enforcement.

4. Why companies don’t have policies because hard to develop making people adhere means work communicating policies out getting all departments to accept policies too much work

5. End Company Benefits Improve user productivity Reduce legal liability Reduce stress on network and systems Set end user expectations

7. Are communicated concisely

8. Enforceable

9. Fair and equitable

11. Easier to maintain (lower cost)

12. Controlling purchasing

14. Resources to help If bound by compliancy- utilize those rules for policies Some Web Resources http://csrc.nist.gov/publications/PubsSPs.html http://www.sans.org/resources/policies/ http://www.scmagazineus.com/The-Five-Critical-Stages-of-Policy-Management/article/30346/ http://blogs.techrepublic.com.com/hiner/?p=467 http://www.ruskwig.com/security_policies.htm

15. Cloud

16. Discussion