Policies

Network Access Control Policy

RS-POL-16

  1. Purpose

    The purpose of this policy is to ensure that users are only provided with access to the network and network services that they have been specifically authorized to use.


  2. Scope

    This policy applies to all assets and networks of Redisolve.


  3. Responsibility

    System Admin is responsible for providing access to the network and network services.


  4. Policy

    The network usage policy ensures that access to networks and network services are controlled by adopting the following mechanisms

    • Access control
    • Authorization procedures
    • Maintaining access control lists
    • Monitoring mechanism
    • Configuring Alerts
    • Segregating networks

    The basic principle of network access control is that access to information will be granted on a need to know or need to have basis, as per job functions.

    Network controls must be applied to enforce a separation between software developers, Support Users, system/security administrators and database administrators.

    Access to assets in the network shall be monitored periodically.

    Requests for access to information resources must be submitted to IT Team by the employee’s Team leader or Managers. Network access shall be granted only after authorization.

    Access control lists on the network shall be maintained.

    Alerts shall be configured on the network equipments that are critical.

Revision History

    • Version No
    • Revision No
    • Details of Change
    • Reviewed By
    • Approved By
  • Reviewed By :
    CISO
    Approved By :
    Shardha Prasad
  • Version No :
    1.0
    Issue Date :
    May 22, 2017
  • Internal Use