Security policies in legal proceedings |
 |
EXPERT RESPONSE FROM: Mandy Andress
|
|
|
|
| > |
QUESTION POSED ON: 01 November 2002
I am in the process of finalizing a security policy for my company. I
have a question about use of the policy for legal proceedings. Have you
ever seen or heard of a legal case where the security policy was used as
support for the company in a case where an employee went against the
policy? Do you have references of these?
|
|
| > |
One of the main purposes of a security policy is to clearly define the
company's expectations so you do have legal recourse when an employee
goes against the policy. You do need to show that the policies were
effectively communicated to the end user and they were aware of the
policy they disobeyed, or at least claim to have known (such as signing
a document that they have read and understood the company's security
policy). As for reference cases, the E-Policy Handbook by Michael Overly
contains some excellent examples.
For more information on this topic, visit these other SearchSecurity.com resources:
Security Policies Tip: Creating an information security policy
News & Analysis: Dos and don'ts for policing user policies
Best Web Links: Security Policies and Infrastructure
|
|
|
|
|
|
|
|
Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and
answer pairs from more than 250 TechTarget industry experts.
|
|
|
|
|
|
|
|
|
|
|
|
