tailieunhanh - Bảo mật hệ thống mạng part 13

Bắt đầu quá trình với các phác thảo của bạn và dự thảo của từng bộ phận của chính sách. Đồng thời liên hệ với các bên liên quan của bạn và nói với họ của dự án. Mời các bên liên quan là một phần của dự án. Những người đồng ý phải được gửi một dự thảo chính sách và mời tham dự một cuộc họp mà dự thảo sẽ được thảo luận và ý kiến được thực hiện. Tùy thuộc vào kích thước của tổ chức và có chính sách đang được phát triển, có thể có. | 76 Network Security A Beginner s Guide Begin the process with your outline and a draft of each section of the policy. At the same time contact your stakeholders and tell them of the project. Invite the stakeholders to be part of the project. Those who agree should be sent a draft of the policy and invited to a meeting where the draft will be discussed and comments made. Depending on the size of the organization and which policy is being developed there may be a single meeting or several. At the meeting Security should act as the chair. Work through the policy section by section. Listen to all comments and allow discussion. Keep in mind however that some comments may not be appropriate. In these cases Security should provide the reasons why a risk would be increased or not managed properly. Make sure that the rest of the attendees understand the reasoning behind the choices of the policy. It may be appropriate to repeat this process for the final draft. When complete take it to management for approval and implement. DEPLOYING POLICY Policy creation is the easy part. In order to create it you only had to get a small number of people involved. To effectively deploy the policy you need to work with the whole organization. Gaining Buy-In Every department of the organization that is affected by the policy must buy into the concept behind it. Getting this done is made somewhat easier because you involved all the stake holders in the creation of the policy. You can show the department managers that someone from their part of the organization was involved and voiced that department s concerns. It also helps if management has agreed that policy is important and needs to be implemented. A message from upper management saying that this policy is important and that it will be implemented will go a long way to helping gain department management buy-in. Education Employees who will be affected by a new policy must be educated as to their responsibilities. This is Security s .