Procedures are step-by-step instructions to perform a
specific task.
Security Procedure Example:
In this example, notice that the level of detail is more
specific than that found in both policies and standards. The procedure is a set
of instructions that a system administrator would perform when sitting at the
keyboard of the computer being built. Most people will not understand this
information—it is very specialized, and intended only for someone who is a
system administrator. The type of specialized information found in a security procedure is usually
very job-specific.
PURPOSE
This
procedure is intended for the security installation
of Apache web servers. It defines the steps necessary to ensure a secure installation that complies
with security policy.
No comments:
Post a Comment