Security Basics mailing list archives

Re: How to distribute corporate policies


From: krymson () gmail com
Date: 13 Oct 2006 20:20:03 -0000

Keep in mind that it is more important that employees know where the policy is located, as it is to notify them of 
updates. Employees should be told where the policies are, and to check them regularly. This is half an HR thing and 
half IT.

For new hires, the policy should be printed out and given them on initial training. Some companies require a signed 
sheet saying, "I have been presented with this policy by HR and understand it and know where to find it should I 
require it."

Locations can be: HR, your manager, an intranet.

I would probably suggest printing out an intial copy for each employee. Any later editions can be referenced on the 
intranet or fileserver. Small changes likely don't need to be announced or redistributed, but major changes may be 
accompanied by an emailed note summarizing the changes and reminding employees where to find the policies.

If you work in a company where not everyone even uses a computer, you likely need to keep extra printouts with a 
receptionist or with HR or even in a break room to give out on demand. 

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: