HOT
Thursday, May 22 2025
Lorem ipsum dolor sit amet, consectetur adipiscing elit.
Written by January 21, 2024

Network Security Policy

IT Policy Article

“`html

EDC Inc Network Security Policy

Purpose

The purpose of the EDC Inc Network Security Policy is to establish a standard for protecting the confidentiality, integrity, and availability of EDC Inc’s network infrastructure and the data that flows within it. This policy outlines the requirements for securing network devices, services, and connections to mitigate risks and vulnerabilities that could compromise EDC Inc’s information assets.

Scope

Read moreData Protection and Privacy Policy

This policy applies to all employees, contractors, and third-party partners who access the EDC Inc network, as well as all hardware, software, and data that are part of or connected to the EDC Inc network infrastructure.

Policy

Account Management

  • User and service accounts must be provisioned, managed, and deactivated through Active Directory following the principle of least privilege.
  • Account reviews must be conducted quarterly by IT Audit and Compliance to ensure proper authorization levels are maintained.

Asset Inventory and Management

  • All network devices and servers must be registered and tracked in the CMDB inventory management tool.
  • IT Server Build Operations is responsible for ensuring that all assets are accurately documented and maintained in the CMDB.

Change Management

  • All changes to network infrastructure must be reviewed and approved by the Change Audit Board (CAB) before implementation.
  • Emergency changes must be documented and retroactively reviewed by the CAB within five business days.

Patching and Vulnerability Management

  • IT Server Operations is responsible for the regular patching of operating systems, with patches applied every 30 days unless an IT Exception is approved by IT Security.
  • Vulnerability scans must be conducted monthly by IT Security Operations, and identified vulnerabilities must be remediated within the timelines specified by the severity of the issue.

Network Access Control

  • Access to the EDC Inc network must be secured through multi-factor authentication mechanisms.
  • Corporate Physical Security is responsible for managing physical access to network infrastructure to prevent unauthorized access.

Incident Response and Management

  • IT-SOC (Incident Management) is tasked with monitoring, detecting, and responding to network security incidents.
  • All security incidents must be reported to IT-SOC immediately upon discovery.

Monitoring and Analysis

  • Continuous monitoring of the network is conducted by IT Monitoring Operations to detect and respond to suspicious activities.
  • Logs must be retained for a minimum of one year and are subject to review by IT Audit and Compliance.

Database Security

  • IT Database Operations is responsible for ensuring that databases are secured in accordance with industry best practices and EDC Inc’s internal standards.
  • Database access must be restricted and monitored, with regular audits conducted to detect any unauthorized access or anomalies.

Enforcement

Any employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment. Third-party partners and contractors who violate this policy may have their contracts terminated and may be subject to legal action.

Policy Review and Modification

Read moreAccess Control Policy

This policy will be reviewed annually by IT Audit and Compliance, or as needed in response to environmental or operational changes. Any modifications to this policy must be approved by the IT Directors of the respective departments and communicated to all stakeholders.

Contact Information

For questions or additional information regarding this policy, please contact the following departments:

  • IT Server Operations: For OS patching and server-related inquiries.
  • IT Security Operations: For incident response and vulnerability management.
  • IT Audit and Compliance: For policy reviews and compliance issues.
  • Corporate Physical Security: For physical access controls and security.

Summary

Read moreIncident Response and Management Policy

The EDC Inc Network Security Policy is a comprehensive framework designed to protect the company’s network infrastructure from threats and vulnerabilities. By adhering to the guidelines set forth in this policy, EDC Inc ensures the security of its data and systems, maintaining the trust of its clients and stakeholders. It is the responsibility of all individuals with network access to understand and comply with this policy to safeguard EDC Inc’s digital assets.

“`

You may also like

Team Department Details

Links and Services

Contact Information for Customers who need support.

236 comments

Leave a Reply to Nakesha Cancel reply

Your email address will not be published. Required fields are marked *