RE: Client Security Policy, IT security Policy Samples

["Marcus J. Ranum" <mjr () ranum com>]

Bob Wanamaker - Avant Systems, Inc. wrote:
> "We cannot develop any security policy without a risk assessment."

Hey, we're all familiar with the stories of the guys who build
boats in their garages and then discover that they can't get
them out?

If the policy is the blueprint for how security is done, and the
firewall etc is the implementation - the risk assessment is
the site survey.

mjr.

---
Marcus J. Ranum                         http://www.ranum.com
Computer and Communications Security    mjr () ranum com

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards