We are also looking into creating a security policy for our college.  I would be interested in seeing how others are going about forming their's.  The big issues we have are the future implementation of a firewall, the ability for users to install/remove software from workstations, passwords and remote access to electronic resources (i.e. use of VPNs).  Our main goal is to layout a general plan of what we want to do, without being to specific, that way we can use it as a guide and also to back up our decisions.

________________________________________________
Stephen Bogdanski           Network Support, MSU-CVM
Michigan State University  [log in to unmask]
A227 VetMed Center         Phone:          (517) 353-5551
East Lansing, MI 48824     Fax:              (517) 432-2937


>>> Oscar Castaneda <[log in to unmask]> 03/17/04 05:32PM >>>
Jim,
We are in the process of writing a document, or a series of documents on
that line. It would be great for me to collaborate with somebody else on
writing it.



Willson, Jim wrote:

>No, I'm referring to what our "security policy" is for the college. For
>example, password expirations and length, what ports will/won't be
>allowed through, etc.
>
>
>On Wednesday 17 March 2004 03:54 pm, Willson, Jim wrote:
>
>
>>Fellow network administrators:
>>
>>We are in the process of planning and implementing a firewall at our
>>college. An important first step is to write a supporting policy for
>>such a system, and then have it approved by our college's governing
>>board.
>>
>>As there are other units out there that are also working on
>>implementing firewalls and other security measures, I would like to
>>take this opportunity to collaborate with those of you interested in
>>developing policies like this to help protect and secure our networks.
>>
>>Does anyone out there already have a security policy in place that
>>addresses these issues? Would you be willing to share it with me
>>and/or the group?
>>
>>Is anyone interested in collaborating in the writing of a network
>>security policy for use at the college/unit level?
>>
>>Thanks,
>>
>>
>>Jim Willson
>>Information Technology Services
>>Broad College of Business
>>Michigan State University
>>http://www.bus.msu.edu/its/
>>
>>
>
>
>
>

--
Oscar Castaneda
Center for Global Change and Earth Observations
Michigan State University