IT Baseline Protection Manual - The Information Warfare Site

Safeguard Catalogue - Organisation Remarks
____________________________________________________________________ .........................................
reprimands but should be handled locally and with as little fuss as possible.
Only if this approach repeatedly fails should further measures (including
measures affecting staff) then be rigorously adopted.
It is critical to the acceptance and credibility of IT security awareness
promotion measures that all those responsible for IT security and also
Management act as role models as regards their own awareness and,
especially, their own rigorous implementation of the security measures.
Additional controls:
- Are specialist publications on IT security available to those responsible for
IT security and, if appropriate, to all staff?
- Are staff informed in a suitable form of IT security incidents which have
occurred either within the organisation or which have become public
knowledge, and are they told how to avoid them?
- Do generally accepted and used forums for in-house communication on IT
security issues exist?
- Are those responsible for security sufficiently versed in the psychology of
how to give motivating talks?
____________________________________________________________________ .........................................
IT-Baseline Protection Manual: Oktober 2000
The good example