Wireless Security.pdf - PDF Archive

Wireless Policy Essentials 695
7.0 Exceptions
Exceptions to information system security policies exist in rare instances where a risk
assessment examining the implications of being out of compliance has been performed,
where a Systems Security Policy Exception Form has been prepared by the data owner
or management, and where this form has been approved by both the CSO or Director of
InfoSec and the Chief Information Officer (CIO).
8.0 Revision History
Date ___/____/_____
Version:_______________________
Author:____________________________________
Summary:__________________________________
A.15 ABC Inc. InfoSec Application Password Policy
Policy No. 14
Effective date Month/Day/Year
Implement by Month/Day/Year
1.0 Purpose
This policy states the requirements for securely storing and retrieving application
usernames and passwords (i.e., application credentials) for use by a program that will
access an application running on one of ABC Inc.’s networks.
Computer programs running on ABC Inc.’s networks often require the use of one of the
many internal application servers. In order to access one of these applications, a program
must authenticate to the application by presenting acceptable credentials. The application
privileges that the credentials are meant to restrict can be compromised when the
credentials are improperly stored.
2.0 Scope
This policy applies to all software that will access an ABC Inc., multi-user production
application.
www.newnespress.com