Security Standard
- •
def
- •
a formal definition for how security technologies and processes should be applied — reduces risk by ensuring everyone understands the expectations
- •
- •
areas commonly standardized
- •
password (complexity policy, acceptable authentication methods, reset procedures)
- •
access control (which access control types are allowed, how access is granted/removed)
- •
physical security (rules for doors, building access, granting access to employees vs. visitors, escort requirements)
- •
Encryption (data-in-use/in-transit/at-rest algorithms, password storage methods — may vary by jurisdiction)
- •
- •
sources
- •
may be written in-house, or drawn from existing standards bodies like ISO or NIST
- •
- •
related