Security standards are security rules applicable to the defined area related to the subject. All departments in our offices are responsible for information security. This report is only for the internal use side of our network. For routine operational information that is not widely available to the public, requires no special measures to protect. This could be things such as correspondences, internal phone directories, or inter-office memoranda. All internal documents should have the bottom of the page labeled “Internal Use Only” regardless of whether printed, stored, or transmitted. Transmissions by spoken word such as answering machines, voicemail, phones, cellular devices, and conversations. Should have reasonable precautions taken to ensure there is no inadvertent disclosure of information. Transmissions by fax, are located in areas no accessible to general public. Transmissions to printers are also kept in locations not accessible to general public and user need reasonable care in printer location selection. Internal transmissions like emails do not need any special handling but again users need to take care with what they are sending to who. Displays and any other media is to be removed or stored out of the sight of non-employees as well all screens faced to where the public cannot see them. Destructed of paper is to be shredded and any media containing hardware incinerated. Workstations and servers are to be password protected and screen saves set to low time limits, and must be located in secured areas with limited access based on job functions. Access control is generally available to all staff on a need-to-know basis with a balanced single point of failure and password access control guidance. Backups should be kept in a secured location and tested regularly to ensure reliability. All users are responsible for their own level of knowledge and security.