Data-processing security policy

A data-processing security policy is an action plan defined to maintain a certain security level. It reflects the strategic vision of the direction of organization (SME, SME, industry, administration, state, unions of states…) as regards Computer security.

Presentation

The Politique of Computer security is one of the elements of the Security policy of the information system. It is thus, in the same way, intrinsically related to the Sécurité of information.

It defines the objective S of safety of the computing systems of an organization.

The definition can be formal or abstract. The security policies are put into force by technical or organisational procedures. Implementation a technical determines whether a computing system is sure or nonsure .

Formal description

If a computing system is regarded as an automat of state finished with a whole of transitions (operations) which change the state of the system, then a security policy can be seen like a means which partitionne these states in authorized and not - authorized.

Being given this simple definition, one can define a sure system as being a system which starts in an authorized state and which will never enter an unauthorized state.

Variations

Of an overall data-processing security policy and general practitioner on the Computing systems, it is possible to decline of the technical security policies by trade, activities or systems.

Thus, one can find like various types of security policy related to the computer security:

Security policy of the data-processing network
Political Security policy system
of the passwords

See too

Computer security
Security policy of the information system
Security policy of the data-processing network
Hardening

Random links: