Policy
The network usage policy ensures that access to networks and network services are controlled by adopting the following mechanisms
- Access control
- Authorization procedures
- Maintaining access control lists
- Monitoring mechanism
- Configuring Alerts
- Segregating networks
The basic principle of network access control is that access to information will be granted on a need to know or need to have basis, as per job functions.
Network controls must be applied to enforce a separation between software developers, Support Users, system/security administrators and database administrators.
Access to assets in the network shall be monitored periodically.
Requests for access to information resources must be submitted to IT Team by the employee’s Team leader or Managers. Network access shall be granted only after authorization.
Access control lists on the network shall be maintained.
Alerts shall be configured on the network equipments that are critical.