Read without ads and support Scribd by becoming a Scribd Premium Reader.
See Premium Plans
 
 
IT Security & Audit Policy
Page 1 of 91
 
 
IT Security & Audit Policy
Page 3 of 91
Prepared by: -
Department Of IT, Govt. Of NCT Of Delhi
Prakash Kumar - Special Secretary (IT)
 Sajeev Maheshwari - System Analyst
CDAC, Noida
Anuj Kumar Jain - Consultant (BPR)Rahul Singh - Consultant (IT)Arun Pruthi - Consultant (IT)Ashish Goyal - Consultant (IT)Rahul Goyal - Consultant (IT)
“IT Security & Audit Policy” document is also available on the site
http
://it.delhigovt.nic.in 
Suggestions and comments are welcomed and can be posted at
webupdate@hub.nic.in
 
 
IT Security & Audit Policy
Page 4 of 91
INDEX
1
 
INTRODUCTION...............................................................................8 
 1.1 I
NFORMATION
S
ECURITY
..............................................................................................81.2 D
ATA
L
OSS
P
REVENTION
..............................................................................................81.3 A
BOUT
V
IRUSES
.........................................................................................................10
A. POLICY FOR GENERAL USERS 
.....................................12 
 
2 
 
POLICIES FOR GENERAL USERS.................................................14 
 2.1 U
SING
F
LOPPIES
 / CD/ F
LASH
D
RIVES
........................................................................142.2 P
ASSWORD
.................................................................................................................142.3 B
ACKUP
.....................................................................................................................142.4 P
HYSICAL
S
AFETY OF
S
YSTEM
...................................................................................152.5 C
OMPUTER
F
ILES
.......................................................................................................152.6 G
ENERAL
I
NSTRUCTIONS
...........................................................................................16
B. POLICY FOR DEPARTMENT 
.............................................18 
 
3 
 
DEPARTMENTAL POLICIES..........................................................20 
 
C. POLICY FOR SYSTEM ADMINISTRATOR 
..................22 
 
4 
 
SECURITY POLICY FOR PURCHASING HARDWARE..................24 
 
5 
 
SECURITY POLICY FOR ACCESS CONTROL..............................25 
 5.1 M
ANAGING
A
CCESS
C
ONTROL
S
TANDARDS
...............................................................255.2 M
ANAGING
U
SER
A
CCESS
..........................................................................................255.3 S
ECURING
U
NATTENDED
W
ORKSTATIONS
..................................................................265.4 M
ANAGING
N
ETWORK
A
CCESS
C
ONTROLS
................................................................265.5 C
ONTROLLING
A
CCESS TO
O
PERATING
S
YSTEM
S
OFTWARE
.......................................275.6 M
ANAGING
P
ASSWORDS
.............................................................................................275.7 S
ECURING
A
GAINST
U
NAUTHORIZED
P
HYSICAL
A
CCESS
...........................................285.8 R
ESTRICTING
A
CCESS
.................................................................................................285.9 M
ONITORING
S
YSTEM
A
CCESS AND
U
SE
....................................................................295.10 G
IVING
A
CCESS TO
F
ILES AND
D
OCUMENTS
...............................................................295.11 M
ANAGING
H
IGHER
R
ISKS
S
YSTEM
A
CCESS
..............................................................295.12 C
ONTROLLING
R
EMOTE
U
SER
A
CCESS
.......................................................................305.13 R
ECOMMENDATIONS
O
N
A
CCOUNTS AND
P
ASSWORDS
..............................................30
6 
 
SECURITY POLICY FOR NETWORKS...........................................32 
 6.1 C
ONFIGURING
N
ETWORKS
..........................................................................................326.2 M
ANAGING THE
N
ETWORK
.........................................................................................326.3 A
CCESSING
N
ETWORK
R
EMOTELY
.............................................................................326.4 D
EFENDING
N
ETWORK
I
NFORMATION FROM
M
ALICIOUS
A
TTACK
.............................336.5 R
ECOMMENDATIONS
O
N
N
ETWORK AND
C
ONFIGURATION
S
ECURITY
........................336.6 R
ECOMMENDATION ON
H
OST BASED FIREWALL
.........................................................34
7 
 
SECURITY POLICY FOR OPERATING SYSTEM...........................35  
Search
Search History:
Searching...
Result 00 of 00
00 results for result for
  • p.
    • Notes
    Load more