| Section 01: Combating Cyber Crime
Defending Against Premeditated Cyber Crime Attacks
POLICY STATEMENT
“Security on the network is to be maintained at the highest level. Those responsible for the network and external communications are to receive proper training in risk assessment and how to build secure systems which minimize the threats from cyber crime.”
Minimizing the Impact of Cyber Attacks
POLICY STATEMENT
“Plans are to be prepared, maintained and regularly tested to ensure that damage done by possible external cyber crime attacks can be minimized and that restoration takes place as quickly as possible.”
Collecting Evidence for Cyber Crime Prosecution
POLICY STATEMENT
“Perpetrators of cyber crime will be prosecuted by the organisation to the full extent of the law. Suitable procedures are to be developed to ensure the appropriate collection and protection of evidence.”
Defending Against Premeditated Internal Attacks
POLICY STATEMENT
“In order to reduce the incidence and possibility of internal attacks, access control standards and data classification standards are to be periodically reviewed while maintained at all times.”
Defending Against Opportunistic Cyber Crime Attacks
POLICY STATEMENT
“it is a priority to minimize the opportunities for cyber crime attacks on the organization’s systems and information through a combination of technical access controls and robust procedures.”
Safeguarding Against Malicious Denial of Service Attack
POLICY STATEMENT
“Contingency plans for a denial of service attack are to be maintained and periodically tested to ensure adequacy.”
Defending Against Hackers, Stealth and Techno-Vandalism
POLICY STATEMENT
“Risks to the organization’s systems and information are to be minimized by fostering staff awareness, encouraging staff vigilance, and deploying appropriate protective systems and devices.”
Handling Hoax Virus Warnings
POLICY STATEMENT
“Procedures to deal with hoax virus warnings are to be implemented and maintained.”
|