Security Operations

W3 Lab: "Prohibited Use"

Overview:

You are the Information Security Officer of Mahtmarg Manufacturing a small manufacturing company worth approximately $5 Million who provides fiber cable to local businesses, individual customers and to government organizations.

In the course of the next eight weeks you will be creating your Information Security Plan (Issue-Specific Security Policy in Table 4-3 of the textbook) step by step using this scenario.

Your Task

Step 3: Develop the Prohibited Use section of your ISP

In this week's Lab you will develop the section on Prohibited Use of your company's information system (IS) in the Information Security Plan to include:

Prohibition of illegal conduct

System and Network Activity restrictions

Copyright infringement

Proprietary information disclosure

Unauthorized use for personal business

Malicious programs

Account disclosure

Email and Communication Activity restrictions

Unsolicited emails

Harassment

Chain letters

Spam

Blogging and Social Media Activity restrictions

Representation of the company on blogs or social media

Separation of personal and professional comments