Network security policy: Difference between revisions

Content deleted Content added

Inline

Latest revision as of 20:05, 1 August 2026

A network security policy (NSP) is a generic document that outlines rules for computer network access, determines how policies are enforced and lays out some of the basic architecture of the company security/ network security environment.^[1] The document itself is usually several pages long and written by a committee.

Overview

A security policy is a complex document, meant to govern data access, web-browsing habits, use of passwords, encryption, email attachments and more. It specifies these rules for individuals or groups of individuals throughout the company.^[2] The policies could be expressed as a set of instructions that understood by special purpose network hardware dedicated for securing the network.

Security policy should keep the malicious users out, and also exert control over potential risky users within an organization.

Insight

Understanding what information and services are available and to which users, as well as what the potential is for damage and whether any protection is already in place to prevent misuse are important when writing a network security policy. In addition, the security policy should dictate a hierarchy of access permissions, granting users access only to what is necessary for the completion of their work. The National Institute of Standards and Technology provides an example security-policy guideline.^{[citation needed]}

References

↑ "Network security policy | Semantic Scholar". www.semanticscholar.org. Retrieved 2020-12-13.
↑ "Network Security Policy | Villanova University". www1.villanova.edu. Retrieved 2020-12-13.

External links

Free Anti‑Phishing & Scam Takedown Service Archived 2025-08-07 at the Wayback Machine by PhishDestroy
Network Security Policy and Procedures document Archived 2022-05-20 at the Wayback Machine by the City of Madison, WI
Computer Security Resource Center Archived 2025-05-17 at the Wayback Machine at National Institute of Standards and Technology

[1] "Network security policy | Semantic Scholar". www.semanticscholar.org. Retrieved 2020-12-13.

[2] "Network Security Policy | Villanova University". www1.villanova.edu. Retrieved 2020-12-13.

[1]

[2]

@@ Line 1: / Line 1: @@
+A '''network security policy''' ('''NSP''') is a generic document that outlines rules for [[computer network]] access, determines how policies are enforced and lays out some of the basic architecture of the company [[security]]/ [[network security]] environment.<ref>{{Cite web |title=Network security policy {{!}} Semantic Scholar |url=https://www.semanticscholar.org/topic/Network-security-policy/321849 |access-date=2020-12-13 |website=www.semanticscholar.org |language=en}}</ref> The document itself is usually several pages long and written by a [[committee]].
-{{More references|date=April 2010}}
-{{Inappropriate tone|date=April 2010}}
+==Overview==
-A '''network security policy''' ('''NSP''') is a generic document that outlines rules for [[computer network]] access, determines how policies are enforced and lays out some of the basic architecture of the company [[security]]/ [[network security]] environment.<ref>{{Cite web|title=Network security policy {{!}} Semantic Scholar|url=https://www.semanticscholar.org/topic/Network-security-policy/321849|access-date=2020-12-13|website=www.semanticscholar.org|language=en}}</ref> The document itself is usually several pages long and written by a committee.
+A [[security policy]] is a complex document, meant to govern data access, [[World Wide Web|web]]-[[web browser|browsing]] habits, use of [[password]]s, [[encryption]], [[Electronic mail|email]] attachments and more. It specifies these rules for individuals or groups of individuals throughout the company.<ref>{{Cite web|title=Network Security Policy {{!}} Villanova University|url=https://www1.villanova.edu/villanova/unit/policies/AcceptableUse/security.html|access-date=2020-12-13|website=www1.villanova.edu}}</ref> The policies could be expressed as a set of instructions that understood by special purpose [[network hardware]] dedicated for securing the network.
+Security policy should keep the [[malicious user]]s out, and also exert control over potential risky users within an organization.
-A security policy a very complex document, meant to govern data access, [[World Wide Web|web]]-[[web browser|browsing]] habits, use of [[password]]s and [[encryption]], [[Electronic mail|email]] attachments and more. It specifies these rules for individuals or groups of individuals throughout the company.<ref>{{Cite web|title=Network Security Policy {{!}} Villanova University|url=https://www1.villanova.edu/villanova/unit/policies/AcceptableUse/security.html|access-date=2020-12-13|website=www1.villanova.edu}}</ref>
+==Insight==
-Security policy should keep the malicious users out and also exert control over potential risky users within an organization. The first step in creating a policy is to understand what information and services are available (and to which users), what the potential is for damage and whether any protection is already in place to prevent misuse.
+Understanding what information and services are available and to which users, as well as what the potential is for damage and whether any protection is already in place to prevent misuse are important when writing a network security policy. In addition, the security policy should dictate a hierarchy of access permissions, granting users access only to what is necessary for the completion of their work. The [[National Institute of Standards and Technology]] provides an example security-policy guideline.{{citation needed|date=April 2010}}
-In addition, the security policy should dictate a hierarchy of access permissions; that is, grant users access only to what is necessary for the completion of their work.
-While writing the security document can be a major undertaking, a good start can be achieved by using a [[Template (word processing)|template]]. [[National Institute of Standards and Technology]] provides a security-policy guideline.
-The policies could be expressed as a set of instructions that could be understood by special purpose [[network hardware]] dedicated for securing the network.
 ==See also==
-*[[Internet security]]
+* [[Internet security]]
-*[[Security engineering]]
+* [[Computer security]]
-*[[Computer security]]
+* [[Security engineering]]
+* [[Industrial espionage]]
-*[[Cybersecurity information technology list]]
-*[[Network security]]
+* [[Information security]]
-*[[Industrial espionage]]
-*[[Information security]]
-*[[Security policy]]
 ==References==
@@ Line 28: / Line 20: @@
 ==External links==
+*[https://phishdestroy.io/ Free Anti‑Phishing & Scam Takedown Service] {{Webarchive|url=https://web.archive.org/web/20250807155706/https://phishdestroy.io/ |date=2025-08-07 }} by PhishDestroy
-*[http://csrc.nist.gov/ Computer Security Resource Center] at National Institute of Standards and Technology
+*[https://www.cityofmadison.com/mayor/apm/it/APM3-9AttachB.pdf Network Security Policy and Procedures document] {{Webarchive|url=https://web.archive.org/web/20220520173438/https://www.cityofmadison.com/mayor/apm/it/APM3-9AttachB.pdf |date=2022-05-20 }} by the City of Madison, WI
+*[http://csrc.nist.gov/ Computer Security Resource Center] {{Webarchive|url=https://web.archive.org/web/20250517163815/https://csrc.nist.gov/ |date=2025-05-17 }} at National Institute of Standards and Technology
+{{Computer security}}
+[[Category:Computer network security]]
 [[Category:Computer security procedures]]
-[[Category:Computer network security]]

v t e Information security
Threats	Adware Advanced persistent threat Arbitrary code execution Backdoors Bombs Fork Logic Time Zip Hardware backdoors Code injection Crimeware Cross-site scripting Cross-site leaks DOM clobbering History sniffing Cryptojacking Botnets Data breach Drive-by download Browser Helper Objects Viruses Data scraping Denial-of-service attack Eavesdropping Email fraud Email spoofing Exploits Fraudulent dialers Hacktivism Infostealer Insecure direct object reference Keystroke loggers Malware Payload Phishing Voice Polymorphic engine Privilege escalation Ransomware Rootkits Scareware Shellcode Spamming Social engineering Spyware Software bugs Trojan horses Hardware Trojans Remote access trojans Vulnerability Web shells Wiper Worms SQL injection Rogue security software Zombie	vectorial version
Defenses	Application security Secure coding Secure by default Secure by design Misuse case Computer access control Authentication Multi-factor authentication Authorization Computer security software Antivirus software Security-focused operating system Data-centric security Software obfuscation Data masking Encryption Firewall Intrusion detection system Host-based intrusion detection system (HIDS) Anomaly detection Information security management Information risk management Security information and event management (SIEM) Runtime application self-protection Site isolation Scrubber Center
Cybersecurity domains	Application security Cloud computing security Cryptography Data security Digital forensics Governance, risk, and compliance Identity and access management Malware analysis and reverse engineering Network security OT/ICS security Penetration testing Security architecture and engineering Security operations Threat intelligence Vulnerability management
Related security topics	Computer security Automotive security Cybercrime Cybersex trafficking Computer fraud Cybergeddon Cyberterrorism Cyberwarfare Electronic warfare Information warfare Internet security Mobile security Copy protection Digital rights management

Jarble (talk | contribs)

Latest revision as of 20:05, 1 August 2026

Overview

Insight

See also

References

External links