Download Contents

Transcript
Information Security Management Example – Software Installation Block
To:All XYZ Company People in Japan
Microsoft is expected to release IE7, the new version of its Internet Explorer
browser, sometime in the next few weeks. Please do not self upgrade to
IE7 on your XYZ Company
unless strictly required by client
ThisWorkstation,
control requires
engagement. Otherwise, some of internal XYZ Company websites may not
a
technical
implementation,
and
be properly displayed.
GIS Rule Book at the first stage only
defines a recommended rule
IE 7 Blocker Kit is a tool, which blocks XYZ Company Workstations from
to get
an 7approval
from Updates/Windows
IS Manager. Update,
getting Internet
Explorer
through Automatic
will be distributed via XYZ Company Connection starting on October 25th.
24
Information Security Management Example – USB Memory Usage Prohibition
To:All XYZ Company People in Japan
Below are the list of major examples of “Information Security violations” and
related global policies and rules established by Information Security
Committee in Japan for
encouraging
employees
to be cautious.
This
control
requires
Information
Security Violations and
a technical
implementation,
Loss or theft of notebook
and sensitive
materials
unattended
GIS Rule
Bookprinted
at the
firstleaving
stage
Wrong transmission
of emails
defines
a rule to put a strap
external device.
Loss of any external
storage
media
with
a small
Business use of USB memory is prohibited as a general rule. However, the
security administrator may permit such use as project policy if one of the
following conditions is met. 1. If the USB memory has a password
protection 2. If the USB memory has a biometric authentication function
(fingerprint authentication, etc.) 3. If files are always encrypted or
password protected when saved in USB memory.
25
17