Home > Security Tips > Compliance Counselor > Security policies should work from home too!
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

COMPLIANCE COUNSELOR

Security policies should work from home too!


Mike Chapple
11.04.2003
Rating: -3.33- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


No matter what the size of your IT department, chances are that you've been called upon to support one or more members of the growing phalanx of telecommuters. These "work at home" individuals range from full-time home office warriors to the overworked executive who tries to knock out a few e-mails between his shower and morning coffee. Let's face it -- telecommuters are a reality and they're here to stay. Have you taken them into account when planning your security policy?

If you quickly answered "yes," take a moment and think again. If you answered affirmatively while thinking to yourself, "We have a $100K VPN and all of our telecommuters have client software installed on their systems," you're probably overconfident. A VPN is not enough. It's certainly the most expensive component of a telecommuting security arrangement, but you need to mind the basics as well. Remember that VPN clients have some degree of access to the corporate network. You certainly wouldn't want Bill CEO



to connect to the VPN using Little Johnnie's computer which, by the way, was recently infected with a virus during Little Johnnie's P2P music swapping.

It is essential that you take steps to ensure that telecommuting computers are up to snuff from a security point of view. Let's take a look at a few options you have up your sleeve, ranging from the most drastic (and most expensive) to the absolute minimum effort:

Don't waste any more time! Get out there and implement a strong telecommuting security policy!

About the author
Mike Chapple, CISSP, currently serves as Chief Information Officer of the Brand Institute, a Miami-based marketing consultancy. He previously worked as an information security researcher for the U.S. National Security Agency. His publishing credits include the TICSA Training Guide from Que Publishing, the CISSP Study Guide from Sybex and the upcoming SANS GSEC Prep Guide from John Wiley. He's also the About.com Guide to Databases.


Rate this Tip
To rate tips, you must be a member of SearchSecurity.com.
Register now to start rating these tips. Log in if you are already a member.


Submit a Tip




BROWSE BY TAG
Security Management,   Compliance Counselor,   Security Policy & Infrastructure,   Mobile/Remote Employee Issues,   Information Security Policies, Procedures and Guidelines,   Information Security Management,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


RELATED CONTENT
Security Management
Smart shopper's guide to correlation tools
What's your infosec IQ?
Countdown begins for Mydoom DDoS attacks
Hackers scanning for ports opened by Mydoom
National cybersecurity alert system launched
Dangerous, familiar application vulnerabilities top list
Potent Mydoom worm flooding inboxes
SSL VPNs stealing IPSec's thunder
Expert sheds light on Wi-Fi liability issues
Security insurance may be a smart policy for some

Compliance Counselor
Common PCI questions: Web application firewalls or source code review?
PCI management: The case for Web application firewalls
The basics of enterprise GRC project management
PCI DSS: The structure of a standard
How to choose between source code reviews or Web application firewalls
HIPAA compliance: New regulations change the game
Data security best practices for PCI DSS compliance
Key elements of a HIPAA compliance checklist
A preview of PCI virtualization specifications
Strategies for email archiving and meeting compliance regulations

Security Policy & Infrastructure
Tier-1 policies overview, part four: Procurement and Contracts, Records Management and Asset Classification Policies
Tier-1 policies overview, part three: Corporate Communications, Work Place Security and Business Continuity Plan Policies
Action-forcing mechanisms encourage policy compliance
Presentation: Essential strategies for policy development
Developing security policies
Best practices: E-mail security policies
Week 2: Passwords -- Updating, selecting and recording user and administrative passwords
What constitutes acceptable use?
Infosec Know IT All Trivia: Policy management
Terminating a system administrator

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Research Solutions for Network Security, Access Control and Security Threats
More Security Resources for Resellers, VARs and OEMs
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts