# data[].attributes.body
All security policies should include a well-defined security vision for the organization.  The security vision should be clear and concise and convey to readers the intent of the policy.  Also included in this section should be details of what if any security standards your organization is following.  Examples of which are ISO 27001 Information Security Management System (sometimes still referred to as ISO 17799), NIST Standard (National Institute of Standards and Technology) or any of the other standards available to you.

# data[].attributes.body
Geng Group NUR ATHIRAH

GIVE US INFORMATION

We collect information you give us or permit us to access. Information may include, but is not limited to, your name, image, birth date, email and physical address, telephone number, gender, contact lists, social media information and profile, location (GPS) information, activity and performance information, and when necessary, credit card information.

WE COLLECT FROM YOUR INFORMATION
We may automatically collect information regarding your interaction with, and use of, our products and services. Information we may collect includes, but is not limited to, your telephone number, Device identifier and hardware information, IP address, browser type and language, cookie information, system type, whether you have enabling software to access certain features, access times, referring website URLs, information about your purchases and other information about your interactions with us.

WE COLLECT FROM OTHER NIKE INTERACTIONS AND THIRD PARTIES
We may combine information you give us with other information from NIKE sources, transactions and communications. This may include, but is not limited to, information from NIKE stores, direct mail, catalogs, events, products and applications, or other NIKE interactions. We may also combine that information with data that is publicly available and data from third parties. We also collect information about gift recipients provided by the giver.

CHILDREN'S PRIVACY
We do not knowingly collect or solicit personal information from children under 13.

# data[].attributes.body
A good security policy is compromised of several factors. The most important factor is that it must be usable. A security policy is of no use to an organization or the individuals within an organization if they cannot implement the guidelines or regulations within the policy. It should be concise, clearly written and as detailed as possible in order to provide the information necessary to implement the regulation. It should be versioned and dated in order to easily identify the most current document, and should be structured internally in such a way that pertinent or required information is identified and located easily within the document for reference. A good security policy also takes into account the existing or implicit rules in use. Business processes evolve over time within organizations as personnel learn more efficient ways of processing information. A security policy should in no way impede or interfere with the business. Rather, it should enhance the process, providing confidence in the security of the day – to – day operations. It must be enforceable with security tools where appropriate, and with sanctions where actual prevention is not technically feasible. Firewalls, intrusion detection  systems, anti-virus applications are some of the tools that can be used to apply the policies in the business environment. However, manual processes should be laid out within the policy, as not every security policy is enforceable via an automated system or application. One of the most common misconceptions is that security policies are driven only by security systems. In actuality, it is the processes outlined within the security policy, and the people who carry out the required policies that create a secure environment.

# data[].attributes.body
A good security policy shoul address tge following:
1. Authentication: who is trying to access the site?
2. Access control: who is allowed to log on to and access the site?
3. Secrecy: who is permitted to view selected information?
4. Data integrity: who is allowed to change data?
5. Audit: who or what causes specific events to occur, and when?

# data[].attributes.body
A good security policies will show that most security breaches are preventable. To prevent these breaches, companies need to develop and enforce solid security policy plans.

Wireless Security Access Policy

End-users are increasingly using inexpensive wireless networking resources to connect themselves to the corporate network. Because wireless network segments are inherently less secure than conventionally wired components, wholesale, uncontrolled use of wireless access will expose the organization to additional risk. Craft and implement a wireless security access policy for your organization to mitigate risk.

Software Installation Policy

The goal of a Software Installation Policy is to identify permitted standard software titles, clearly communicate what is prohibited, and outline proper procedures for installation. Use this template to craft a policy suited to the needs of your enterprise.

Mobile Device Acceptable Use Policy

The policy applies to any hardware and related software that could be used to access corporate resources, even if said equipment is not corporately sanctioned, owned or supplied.

# data[].attributes.body
Nestle
Referrals

If you send a business contact or acquaintance an e-mail or a downloadable application from the web site referring the acquaintance to this web site, the "referral" information you provide is used on a one-time basis to facilitate this communication and is not further retained by Nestlé.

Cookie / Tracking Technology

The web site may use cookie and tracking technology depending on the features offered. Cookie and tracking technology are useful for gathering information such as browser type and operating system, tracking the number of visitors to the web site, and understanding how visitors use the web site. Further, cookies can also help customize the web site for visitors and offer an efficient manner to log into the sign-in sections of the web site. Personal information cannot be collected via cookies and other tracking technology. However, if you previously provided personally identifiable information, cookies may be tied to such information. Aggregate cookie and tracking information may be shared with third parties.

# data[].attributes.body
A good security policy is compromised of several factors. The most important factor is that it must be usable. A security policy is of no use to an organization or the individuals within an organization if they cannot implement the guidelines or regulations within the policy. It should be concise, clearly written and as detailed as possible in order to provide the information necessary to implement the regulation. It should be versioned and dated in order to easily identify the most current document, and should be structured internally in such a way that pertinent or required information is identified and located easily within the document for reference. A good security policy also takes into account the existing or implicit rules in use. Business processes involve over time within organizations as personnel learn more efficient ways of processing information. A security policy should in no way impede or interfere with the business. Rather, it should enhance the process, providing confidence in the security of the day to day operations. It must be enforceable with security tools where appropriate, and with sanctions where actual prevention is not technically feasible. Firewalls, intrusion detection

# data[].attributes.body
A good security policy, The first step in any project to prepare a security policy document is to determine what elements to include in your policy. Be sure to consider all the key elements your IT staff manages.
1) Security accountability: Stipulate the security roles and responsibilities of general users

2) Security training: Define a security training plan for key staff who manage day-to-day security operations in order to sustain your security policy and keep your security staff current with the latest techniques.

3System policies: Define the host security configuration for all mission-critical operating systems and servers.

# data[].attributes.body
A security policy is a written statement describing which assets to protect and why they are being protected,who is responsible for that protection,and which behavior are acceptable and which are not.The policy primarily addresses physical security,network security,access authorization,virus protection and disaster recovery.The policy develops over time and is a living document that the company management and security personnel must review and update at regular intervals.A GOOD POLICY should address the following :
1)Authentication:who is trying to access the site?
2)Access Control:who is allowed to log on to and access the site?
3)Secrecy:who is permitted to view selected information?
4)Data integrity:who is allowed to change data?
5)Audit:who or what causes specific events to occur,and when?