Creating security policy by maizatul akmar

Creating security policy by maizatul akmar https://padlet.com/maizatul82/securitypolicy You as an owner of XYZ, develop your own security policy. en-us 2017-04-10 11:02:33 UTC 2017-04-11 14:19:08 UTC hello@padlet.com The Five Infea https://padlet.com/maizatul82/securitypolicy/wish/165813796 1)Identify Threats
-Determine which assets must be protected from which threats.
e.g:Anything of value, a useful or valuable quality or thing; an advantage or resource.
2) Learn from others
-There are many types of security policies, so it's important to see what other organizations like yours are doing.
e.g:can spend a couple of hours browsing online, or we can buy a book.
3)Train employee
-We must treat our employee in order to ensure that the employee understanding all the policies and rules in company.

]]> 2017-04-11 05:30:24 UTC https://padlet.com/maizatul82/securitypolicy/wish/165813796 Group 8 https://padlet.com/maizatul82/securitypolicy/wish/165827591 1) Data Security
Data protection is a matter of trust and customer privacy is important to the company .

2)Disclosure of Personal Information
Company may share your Personal Data with suppliers such as accommodation properties and other third parties we appoint to perform services on our behalf, such as third party loyalty programs, web hosting, data analysis, marketing (also on websites of such third parties), customer care, credit card and payment services and related services.

3)Computer Security
When customers visit Company website, a cookie is a small piece of data that is sent to your computer from the Site and stored on your computer’s hard drive about your data

]]> 2017-04-11 07:46:44 UTC https://padlet.com/maizatul82/securitypolicy/wish/165827591 ASTRO GROUP https://padlet.com/maizatul82/securitypolicy/wish/165827802 Wireless Security Access Policy

This policy can help the company to implement guidance for wireless access to the corporate network, which with the advent of cheap access points and about a million different client devices has become a very risky proposition.

Software Installation Policy

This policy can help the company to craft a common-sense policy and installation procedure to govern what types of software finds its way onto end-user devices, heading off potential compliance and security issues.

Mobile Device Acceptable Use Policy

This policy can help the company to define standards, procedures and restrictions for end users who have legitimate business requirements to access corporate data from a mobile device connected to an unmanaged network outside of a company's direct control.

]]> 2017-04-11 07:48:33 UTC https://padlet.com/maizatul82/securitypolicy/wish/165827802 Nash Group https://padlet.com/maizatul82/securitypolicy/wish/165829166 1.Virus and Spyware
-Protection policy

Detects, removes, and repairs the side effects of virus and security risks by using signatures.

2. Firewall policy

-Blocks the unauthorized users from accessing the computers and networks that connect to the Internet.

3.LiveUpdate policy

-The LiveUpdate Content policy and the LiveUpdate Settings policy contain the settings that determine how and when client computers download content updates from LiveUpdate. You can define the computers that clients contact to check for updates and schedule when and how often client computers check for updates.

]]> 2017-04-11 08:01:31 UTC https://padlet.com/maizatul82/securitypolicy/wish/165829166 Bella Ammara https://padlet.com/maizatul82/securitypolicy/wish/165831189 Account maintenance - to create and maintain your accounts with us, including administering any consumer loyalty or rewards programs that are associated with your account.

Consumer service - to provide you with consumer service, including responses to your inquiries, complaints and general feedback about our products. Consumer service may be provided through various forms of communication, including via email, letter, telephone and online chat features.

Consumer engagement - to get you more actively engaged with our products and services. This may involve the use or publication of consumer-generated content.

]]> 2017-04-11 08:22:20 UTC https://padlet.com/maizatul82/securitypolicy/wish/165831189 Al-Ikhsan Group https://padlet.com/maizatul82/securitypolicy/wish/165833644 Make sure the policy conforms to legal requirements
Depending on your data holdings, jurisdiction and location, you may be required to conform to certain minimum standards to ensure the privacy and integrity of your data, especially if your company holds personal information. Having a viable security policy documented and in place is one way of mitigating any liabilities you might incur in the event of a security breach.

Level of security = level of risk
Don't be overzealous. Too much security can be as bad as too little. You might find that, apart from keeping the bad guys out, you don't have any problems with appropriate use because you have a mature, dedicated staff. In such cases, a written code of conduct is the most important thing. Excessive security can be a hindrance to smooth business operations, so make sure you don't overprotect yourself.

Set clear penalties and enforce them
Network security is no joke. Your security policy isn't a set of voluntary guidelines but a condition of employment. Have a clear set of procedures in place that spell out the penalties for breaches in the security policy. Then enforce them. A security policy with haphazard compliance is almost as bad as no policy at all.

]]> 2017-04-11 08:41:35 UTC https://padlet.com/maizatul82/securitypolicy/wish/165833644 Group Big Apple. https://padlet.com/maizatul82/securitypolicy/wish/165834680 1. Guest Access Policy

- States the company's policy for allowing guests.

- A sound policy on guest network access will reduce risk and ensure consistent application of security standards across the company.

2. Email Policy

- To detail the company's usage guidelines for its email system.

- Can reduce risk of an email-related security incident, foster good business communications both internal and external to the company.

- Outlines expectations for appropriate, safe, and effective email use

3. Wireless Access Policy

-The company's position on use of wireless networking, including installation and configuration guidelines for access points, access to confidential data, and inactivity.

-The purpose is to state the standards for wireless access to the network.

]]> 2017-04-11 08:50:13 UTC https://padlet.com/maizatul82/securitypolicy/wish/165834680 Company Adidas misshondaathirah https://padlet.com/maizatul82/securitypolicy/wish/165838568 Geng Group NUR ATHIRAH

KIND OF INFORMATION DO WE COLLECT
There are cases where adidas may ask you for personal information, such as your name, address, date of birth, gender, email address, etc. We do this for instance when you register for contests/promotions, respond to communication such as e-mail, and for services that require registration or subscription. If you would like to be on our mailing list, we will ask you to actively opt-in. We use 'cookies' to gather information about your visits to our website and enhance your experience. You can find more information on how we use cookies in the section

USE OF VISITORS’ INFORMATION
All personal information that we obtain about you will be recorded, used and protected by us in accordance with current data protection legislation and this privacy policy. We will primarily use your personal information to provide products and services to you and, for example:

To send you information/materials via e-mail or sms-messages about products, offers and news we think could interest you. This information may relate to products, offers and news of adidas and/or its licensees or carefully selected commercial partners. We only send you this if you have opted-in to receive adidas e-mails and/or sms messages. In case you do not want to receive any e-mails and/or sms messages from us anymore, or if you want to modify your personal data or want your personal data to be deleted from our database, we refer you to the 'Opt-out, delete or modify personal information' section below

MANAGES VISITORS’ INFORMATION
The global and local websites of adidas and the information collected, are managed and controlled by adidas AG (Adi-Dassler-Platz 1-2, 91074 Herzogenaurach, Germany. The servers that make the global and local websites of adidas available are located in the USA. If you are located outside the USA please note that the information you provide will be transferred to the USA and by submitting the information you authorize this transfer. Adidas has entered into an agreement with the hosting company in the USA to provide sufficient safeguards for the protection of your data

PROTECTION OF VISITORS’ INFORMATION

In order to protect the information you provide to us by visiting our website we have implemented various security measures. Your personal information is contained behind secured networks and is only accessible by a limited number of people, who have special access rights and are required to keep the information confidential.

CHILDRENS’ PRIVACY
Adidas is committed to protect the privacy of children and has no intention of collecting personal data from children under the age of 13. If you are a child under the age of 13 and you try to submit your registration, the registration will be rejected and we will inform you that we do not accept registrations from children under 13. We encourage parents and guardians of children under 13 to regularly check and monitor their children’s use of e-mail and other activities online.

]]> 2017-04-11 09:28:38 UTC https://padlet.com/maizatul82/securitypolicy/wish/165838568 group 7 https://padlet.com/maizatul82/securitypolicy/wish/165889484 GIAC
- Develop policies that you plan to enforce.
A policy that you are unable or unwilling to enforce is useless. If your policy states that Internet usage is strictly limited to conduct business-related tasks, but you do not block site access or have the capability to monitor an employee’s Internet activity, you should do away with the policy.
- Make your security policies available to everyone.
You can have the best policies ever written, but if your employees never see them or do not know where to find them, they will never be effective.

]]> 2017-04-11 14:14:36 UTC https://padlet.com/maizatul82/securitypolicy/wish/165889484