Security Policies – Addressing Threats

• Train Employees so they are less likely to fall for Social Engineering
• AUP - Acceptable Use Policy
• Eliminate Conditions that lead to threat liklihood
• BYOD - Bring Your Own Device Policy
• Make sure an external device does not contribute to internal threats
• Incident Response Policy
• Does your staff know what to do in the event of a incident?