Trilight Zone

[thedark]

I have seen some realy high folutin documentation on how to create a security policy. After many years of experence I know now say, don't believe a word of them. Create a security policy is simple.


describe what you need to service
describe the group of people you need to service
describe which service each group needs access to
for each service group describe how the service should be keep secure
write a statment making all other forms of access a vialation
Your policy will become more complicated with time but don't try to cover to much ground now. Make it simple and clear.