Auditing the Internet, E - Business

NETWORK SECURITY POLICIES
Auditing for Appropriateness & Completeness

Responsibilities of owners, custodians and users

General disclosure policy

Confidential information marking

Confidential information handling & storage

Confidential information reproduction

Confidential information transport and destruction

System access control

Internet connections

Computer viruses, worms and trojan horses

Application development

Contingency planning

Encryption

Portable computers

Remote printing

Privacy and personal use

Software copying

Physical security of computer network gear

Handling information security

Violations