The policy tag has no wiki summary.
1
vote
0answers
35 views
Problem: Restrictions in effect on computer. Asking me to contact my system administrator [migrated]
This started happening when I had to restart my computer for an exam so I can get it working faster. When I rebooted it, it stopped giving me the option to do alt-F4 to be able to shut down, ...
5
votes
2answers
98 views
Segregation of Duties of 3 tier Applications
This is a tricky issue I'm dealing with at the office. Management has a very... interesting concept of segregation of duties when it comes to traditional 3 tier applications.
I'm trying to figure ...
4
votes
2answers
56 views
Incident Reporting or Notification Policy domain?
I'm writing a company policy on how employees should handle reports of information security related events and notifications that come from vendors, customers, and from people within our organization.
...
3
votes
4answers
224 views
How can I constrain or limit 3rd party Javascript (*.js) files that can DOS my site?
Many website owners integrate Google analytics, various Facebook or Twitter social media javascript plug ins into their web pages. The problem is that this trust seems to be "all or nothing", meaning ...
19
votes
7answers
893 views
How Involved Should a Developer Be in Designing a Security Policy?
I've been developing software for well over 20 years. During that time I've worked in Fortune 100 companies that had very specific security requirements developed by dedicated security professionals ...
3
votes
7answers
231 views
Generate user a password instead of asking for one?
I'm trying to weigh the benefits of not allowing users to create their own passwords, but must pick out of a generated selection. Are there any examples of sites that have do use this approach?
...
2
votes
3answers
93 views
Is there a domain specific language for security policies
Is there a domain specific language popular for defining security policies that are applicable across systems, domains or enterprises ?
Edit: Typically to express security policies at network level ...
27
votes
8answers
1k views
Is it safer to use less heard of software than popular software?
Is it good policy to use non-mainstream applications, or does it depend? For example is it better to use a less popular browser, media player or operating system as it is less likely a target for ...
2
votes
2answers
177 views
Security model for datacenters
I have several datacentres and now I want to plan security for it, so it's resilient to external attacks.
I need to make a security model which will cover my web servers, auth servers, log servers, ...
