Developing Internet security policy for organizations
Sharman Lichtenstein · 2002
The paper describes a general framework for developing an organization's Internet security policy. A model of Internet security risks for an Internet user organization is proposed; the framework utilizes this model, as well as considering important holistic issues, in order to develop the user organization's Internet security policy. A hierarchy of subpolicies for the Internet security policy is also suggested. The paper presents the results of one phase of a wider investigation into Internet security policy.