This ACH Payment Process Policy, written by Erik Eckel for TechRepublic Premium, describes the procedures an organization and its representatives must use when paying any approved invoice from authorized vendors, suppliers, consultants, contractors, government agencies, or other authorized products, services or tax authorities via a manual electronic payment. This policy can be customized to fit ...
Failing to encourage whistleblowers can cause damage to the business in the form of lost revenue, lost customers, a negatively impacted reputation and legal lawsuits or criminal charges. The purpose of this policy, written by Scott Matteson for TechRepublic Premium, is to provide guidelines for the practice of whistleblowing to ensure unethical and/or illegal acts ...
The list of advantages to cloud computing include lowered operational costs, greater technological flexibility and the ability to rapidly implement new systems or services. However, cloud computing has also opened up new opportunities for impact by security threats or lost data. The purpose of this policy, written by Scott Matteson for TechRepublic Premium, is to ...
The risk potential of running user-initiated tasks using the same access levels as components of the operating system is staggeringly high, particularly in an age where ransomware can traverse networks, encrypting files in demand of payment. Privilege levels can mitigate potential damage posed by external threats, internal malicious actors and simple operator error. This policy ...
Most organizations rely on a virtual private network environment to enable connectivity from remote and mobile employees, providing secure access to internal networks, systems, applications and data. This policy, written by Scott Matteson for TechRepublic Premium, outlines a set of best practices for IT to deploy and secure VPNs in your organization. It also defines ...
Good cyber and physical security can make or break companies. While it would be preferable that security breaches or incidents not take place at all, they don’t necessarily signal the death of an organization unless responded to in a poor fashion (or not at all). The purpose of this Security Response Policy, written by Scott ...
Storage area networks provide manageable, centralized storage capacity for systems offering vast amounts of disk space via a dedicated network link. SANs can offer servers much more disk space than they might be able to utilize locally, often spanning dozens if not hundreds of terabytes of data. Because of their complexity, however, SANs are not ...
Risk management involves the practice of addressing and handling threats to the organization in the form of cybersecurity attacks and compromised or lost data. The process of establishing appropriate risk management guidelines is critical to ensure company operations and reputation do not suffer adverse impacts. The purpose of this policy, written by Scott Matteson for ...
Data breaches can cost companies tens of thousands of dollars or more, and can pose a significant risk to company operations and reputation. Customer information is usually one of the favorite targets of hackers as it contains confidential details which can be used to commit property or identity theft. Even innocent mistakes such as a ...
Secure remote access to company systems and networks is now a way of life for most organizations. As corporate conglomerates, small businesses and brick-and-mortar shops fade away in favor of a distributed offsite workforce, companies and employees can profit from the greater convenience and efficiency provided by remote access. Combined with a bring your own ...
Every company’s network is made up of devices that transmit and store information. This can include internal and external systems, either company-owned or leased/rented/subscribed to. To protect company data and reputation, it is essential to ensure that the network is secured from unauthorized access, data loss, malware infestations and security breaches. This must be done ...
Information is the lifeblood of the business. Without it, employees can’t work, customers can’t interact with the business, bills can’t be paid and profits can’t be earned. Any given technological environment is useless if its main purpose for existence — the processing and sharing of information — is threatened or eliminated. With that in mind, ...
As worldwide energy needs and concerns about climate change continue to increase, environmentally responsible business practices are critical for the successful future of a company and the markets in which it operates. This IT Data Center Green Energy Policy, written by Scott Matteson for TechRepublic Premium, is intended to meet green standards for IT data ...
Software development is a complex process that involves a specific series of steps (known as the development lifecycle) to transform a concept into a deliverable product. The steps involved with creating the finished product must be carefully adhered to yield the best results, reduce inefficiencies and maximize customer satisfaction. The purpose of this policy, written ...
Establishing proper timeframes for storing sensitive or private documents is essential to efficient company guidelines. Keeping documents for too short a period of time may negatively impact business operations or customer interactions. On the other hand, retaining documents for too long may violate rules or legal requirements and expose data to risk. The purpose of ...