Addressing Risks Associated with
People
An effective security policy
n
Typical goals for security policies:
Ensuring that authorized users have appropriate
access to the resources they need
Preventing unauthorized users from gaining
access to the network, systems, programs, or data
Protecting sensitive data from unauthorized access