Why Policies Matter If work-related security concepts were given a slogan, it would probably be “always follow policy.” In fact, you’ve probably encountered that statement many times, and for good reason. Policies are created to keep data, systems, and people safe. :LWKRXWFOHDUO\GHȴQHGSROLFLHVRUJDQL]DWLRQVZRXOGVWUXJJOHWRPDLQWDLQVHFXULW\7KH\ZRXOGDOVRVWUXJJOHWR DGKHUHWRFRPSOLDQFHUHJXODWLRQVȃWKHODZVWKDWHVWDEOLVKUHTXLUHPHQWVIRUGDWDSULYDF\2UJDQL]DWLRQDOSROLFLHV often align with those requirements to ensure rights are not violated. With that in mind, let’s explore a few examples of common policies and why they exist.
POLICY:
WHY?
3DVVZRUGVPXVWPHHWVSHFLȴF requirements, such as how long they should be and when they should be updated.
Weak passwords lead to weak security and could DOORZXQDXWKRUL]HGDFFHVVWR FRQȴGHQWLDOLQIRUPDWLRQ
POLICY:
WHY?
ΖWȇVYLWDOIRURUJDQL]DWLRQVWR FRQWUROWKHȵRZRIGDWDRQ devices and manage security vulnerabilities.
Only install approved applications or software.
POLICY:
WHY?
7LPHO\UHSRUWLQJKHOSV RUJDQL]DWLRQVLQYHVWLJDWHLQFLGHQWV and mitigate potential damages.
Report all security incidents immediately.
POLICY:
WHY?
86%ȵDVKGULYHVDQGFDEOHVDUH used by criminals to distribute malware (malicious software).
Never plug in random USB devices.
POLICY:
WHY?
Leaving a laptop or mobile device in plain sight (such as in a vehicle) could lead to theft.
Always store work-issued devices in a secure manner.
Now imagine none of those example policies existed or if team members blatantly ignored them. Weak passwords, IRUH[DPSOHSODFHRQOLQHDFFRXQWVDWULVNRIEHLQJKDFNHGΖWZRXOGQȇWWDNHORQJIRUWKHRUJDQL]DWLRQWRVXHUDGDWD breach that leaks sensitive information. :KLOHLWPLJKWEHWHPSWLQJWRYLHZSROLFLHVDVRUJDQL]DWLRQVWHOOLQJSHRSOHZKDWWRGRLQUHDOLW\SROLFLHVH[LVWWR protect everyone’s privacy, including yours! As such, always following policy is a great habit that helps maintain both security and privacy.
Rafael Cohen Chief Information Officer
4
©2024 The Security Awareness Company - KnowBe4, Inc.
Made with FlippingBook - professional solution for displaying marketing and sales documents online