This Slideshare presentation is a partial preview of the full business document. To view and download the full document, please go here: http://flevy.com/browse/business-document/iso-27001-2013-introduction-v3-0-part-4-2568 BENEFITS OF DOCUMENT 1. Learn about ISO 27001 2013 practices. DOCUMENT DESCRIPTION This module deals with the introduction to ISO 27001 2013 programs.

1. Module 01
Chapter 04
Practical ISO 27K

2. Solution at Individual Level
Adhere to Security Policies
and Good Security Practices
4
This document is a partial preview. Full document download can be found on Flevy:
http://flevy.com/browse/document/iso-27001-2013-introduction-v3-0-part-4-2568

3. Password Policy
• Employees shall use strong passwords
• Passwords should be memorized and
not written-down in any form
• Do not display user names, passwords
on the boards
• Password must not be disclosed under
any circumstances
7
This document is a partial preview. Full document download can be found on Flevy:
http://flevy.com/browse/document/iso-27001-2013-introduction-v3-0-part-4-2568

4. • Users are responsible for ensuring
archiving/backup and secure storing of
their e-mails
• Be aware of Phishing
Email Policy
10
This document is a partial preview. Full document download can be found on Flevy:
http://flevy.com/browse/document/iso-27001-2013-introduction-v3-0-part-4-2568

5. Visitors Policy
• No visitor / vendor allowed beyond reception
unescorted
• Do not discuss any company information with
persons / people outside the office and visitors
• Entertain visitors at the lobby / reception
• Confirm on purpose of visit and permissions
before escorting the visitor
• Unauthorized personnel are not allowed in
work areas
13
This document is a partial preview. Full document download can be found on Flevy:
http://flevy.com/browse/document/iso-27001-2013-introduction-v3-0-part-4-2568

6. Disciplinary Policy
• Installation or use of pirated/unauthorized
software
• Sending offensive Email messages
• Violation of Information Technology Act 2000
Falsification of records
16
This document is a partial preview. Full document download can be found on Flevy:
http://flevy.com/browse/document/iso-27001-2013-introduction-v3-0-part-4-2568

7. What this means to you as an User
Have strong password
Do not misuse information
processing facilities
Report if you observe any security
lapse
Keep information confidential
Collect print outs quickly
19
This document is a partial preview. Full document download can be found on Flevy:
http://flevy.com/browse/document/iso-27001-2013-introduction-v3-0-part-4-2568

8. What this means to you as Information Systems
executive
Analyze security incidents for
corrective action
Maintain asset ownership and
control access
Ensure appropriate maintenance
for all equipments
Periodic testing of backups and
service continuity options
22
This document is a partial preview. Full document download can be found on Flevy:
http://flevy.com/browse/document/iso-27001-2013-introduction-v3-0-part-4-2568

9. 1
Flevy (www.flevy.com) is the marketplace
for premium documents. These
documents can range from Business
Frameworks to Financial Models to
PowerPoint Templates.
Flevy was founded under the principle that
companies waste a lot of time and money
recreating the same foundational business
documents. Our vision is for Flevy to
become a comprehensive knowledge base
of business documents. All organizations,
from startups to large enterprises, can use
Flevy— whether it's to jumpstart projects, to
find reference or comparison materials, or
just to learn.
Contact Us
Please contact us with any questions you may have
about our company.
• General Inquiries
support@flevy.com
• Media/PR
press@flevy.com
• Billing
billing@flevy.com