Network Security Policy

Scope

This Network Security Policy applies to all Riordan networks, and the parties with which Riordan does business with.

Policy

The following rules define Riordan’s Security Policy regarding access to the corporate network:

1. Only authorized users are granted access to Riordan networks. Identification is required for access to Riordan systems. User identification will be established with user IDs and secure passwords for access to Riordan computers.

2. All users are given User IDs for identification. Each user ID must is unique to the user, and only that user, so as to provide accountability of all individuals in system logs.

3. Access control policy for remote systems connecting to Riordan networks. All …show more content…
Security notices on all log in banners. Every log-in screen for multi-user systems must include a special notice that states: (a) the system may only be accessed by authorized users, (b) users who log-in represent that they are authorized to do so, (c) unauthorized system usage or abuse is subject to criminal prosecution, and (d) system usage will be monitored and logged.

6. All users must log off when before leaving their workstation unattended All users must log off when leaving their workstation. This is extremely important if the user has special access rights, like system administrator privileges.

7. Firewall Protection for all Internet Web Servers. All connections between Riordan internal networks and the Internet require protection by a firewall, router, and/or or related network security access controls approved by the IT department.

8. Network Segmentation for Public servers on Internet. Public Internet servers must be segmented into subnets separate from internal Riordan networks. Routers or firewalls must be employed to deny traffic from the public servers to Riordan’s network.

9. External network connections must pass through firewalls. Before accessing the log in screen, all external connections to Riordan internal networks must pass through an additional access control point such as a firewall, gateway, or access