Purpose and Goals of WLAN Security Policies
A very good source of samples of security policies is the
SANS Security Policy Resource Web page [2], which is maintained by the
current policy project director, Michele D. Guel [3]. SANS policy information is
provided free of cost. The folks at SANS compiled those security policies
originally to assist those attending SANS
training programs, but because SANS feels the security of the Internet depends
on vigilance by all, they have made these resources available to the entire
Internet community.
Another resource the reader can consult for security policy
information is RFC 2196 [4]. This handbook is one of the early guides to developing
computer security policies and procedures for sites that have systems on the
Internet. Its purpose is to provide practical guidance to administrators who are
trying to secure their organizational information and services. Topics covered
include policy content and formation, a broad range of technical system and
network security topics, and security incident response.
For all security policies developed in an organization, a
standard template should be used to ensure consistency of presentation and
format. We have provided a generic format that we recommend for the development
of your security policies. The template may be modified to suit your
organizational needs. The implementation of policies, as part of an overall
organizational security plan, can greatly enhance the protective posture of any
organization.