Security Guidelines
Documentation of security procedures and rules
Simple situations usually don’t require so much complex solutions. Also, one
off the tasks that we deal with no rush, we are usually able to solve
on the fly.
Finally, the basic human capability, which helps us to
survive, is improvisation in the sense of finding the simplest possible
way how to overcome difficulties. This natural feature, however, can
quickly become a burden in situations, where it is necessary to solve
problems repeatedly and repeatably, where problems are often demanding
tasks of contemporary overtechnicized world controlled by powerful, but
very vulnerable computer technologies.
The situation is further complicated by typically high demands on speed and accuracy performance of the tasks. Moreover, we often share these tasks with other people, with which we should be able quickly and accurately cooperate.
If a subject to solution are problems which are solved by using those powerful and yet so much vulnerable technologies (precisely using the information which are processed by such technologies), the greatest caution is appropriate. Any mistake can result into a failure or degradation of other devices working with information, or into destruction, loss or unavailability of information themselves.
Strict protection of information thus require meeting specific rules designed to prevent possible damage to information during their life cycle. Unfortunately, due to a number of requirements, which must be monitored and strictly adhered in the interest of safety , it is practically impossible to ensure long-term protection of information on an adequate level while using mere improvisation and problem-solving on ad hoc basis.
Formalization of the necessary rules of conduct for people in working processes and for operating technologies in a controlled way is therefore a basic condition for safe work with valuable information.
Objectives
Security solutions entails the need of properly processed security documentation. At creation of necessary organizational and technical documents you may usually encounter difficulties with the appropriate form and with a content of such documentation.
The aim of well-processed security documentation is a complete and yet most factual description of the security rules from basic principles and principles of safety, through a description of working processes to technical details of the settings of your devices.
In addition, for the most effective usage of documentation by different groups of users (users with no technical erudition of computer technology on one hand, administrators or security managers on the other hand), it is appropriate to structure documentation in accordance with principles and needs mentioned above. Moreover, if we consider (in terms of practical) the need of updating documents in the context of changes in operating procedures and introduction of new technologies, it is also suitable to remember this aspect when designing documentation.
Benefits
By applying our experience in creating a flexible but comprehensive documentation you will gain:
Rapid and effective design of documentation structure and determination of responsibility, avoiding redundancy of information in individual documents and without an enormous burden on your staff required for the documentation maintenance.
Best practices and proven solutions to security documentation, which will fully reflect specifics of our environment and legislation framework.
Our experienced specialists will help you not only with creating documentation, but also with implementing of approved procedures into operation.