Question

Information technology (IT) infrascruture security policies are represented in many types of policy documents, depending on the organization’s network and infrastructure needs. These differences stem from different cyber security risks. They also present organizations with different choices to define and make in their security policies.

1. What are some best practices organizations can observe when creating and maintaining domain policies?

2. LAN security policies often center on issues concerning connectivity; this includes determining how devices adhere to the network. What LAN security policies/standards does YOUR organization deploy? Why?

3. In general, WAN-specific standards identify specific security requirements for WAN devices. What WAN security policies/standards does YOUR organization deploy? Why?

Answer 1

1) Following are some good practices observed by orgs:

a.Security incident response plan— A security incident strategy should give a guidelinethreat response, priorities identification along with fixes
b.Identity and access management (IAM) regulations—let IT administrators authorize systems and applications to the right individuals.
c.Personal and mobile devices— Drafting a policy for security of owned devices by employees can avoid exposure to future issues via employee-owned assets.
d.Privacy regulations— Organizations should protect the privacy of their data and their users.
e.Information and data classification—Poor information and data classification leave systems vulnerable.
f.IT operations and administration— Lack of cooperation between departments may lead to configuration errors.

2)

IT is responsible for establishing and maintaining standards for 802.11x wireless access points .

This needs high security as this acts as intranet and companies data will be compromised in event of this protocol being hacked into.