Network security experts agree that well-run corporations need a written security policy. This document lays down a comprehensive network security policy that will be compliant with the company’s WAN structure. It should be noted that network, security considering the magnitude and significance of the issue, should be the responsibility of a dedicated individual –The Information Security Officer as accountability is a key aspect in the effective and successful implementation of the policy. The human resources management division should make sure that all policy instructions and guidelines are communicated to all members of staff using the Internet (including e-mails) and other network facilities and that all policy requirements are complied with. An effective code of conduct guidelines aligned with organizational information security policies in terms of network usage needs to be developed and approved by the management and should be adhered to by all employees. The Network Security Policy The network security policy presented in this document has been divided into three parts. The first part deals with issues concerning network hardware and peripherals. The second section deals with access control issues and the third section goes into the details of information and document usage and processing. Hardware and Peripherals All procurement of new hardware systems or new peripherals for already present systems has to be compliant with Information security and aligned with organizational policies and technical norms. Requests for purchases should be founded on User Requirement Specifications and should be by business objectives. All purchase requests must be structured in the form of a Request for Procurement document and this should be thoroughly evaluated before the purchase process. All supplies should be properly and effectively tested and accepted as per standards before being put into operational use. An Uninterruptible Power Supply failsafe mechanism has to be designed and implemented to maintain continuous power supply to critical equipment. Use of public telephone lines through modems/ ISDN/ DSL connection for transmission of sensitive and confidential data will be permitted only in case more secure transmission channels are exhausted and the transmission has to be authorized by both the sender as well as the recipient. A dedicated team constituted by proficient engineers should be accountable for the installation and maintenance of network cabling to warrant the reliability of cabling and other network hardware. All unexploited wall sockets are to be sealed off with proper documentation of their status. Usage of removable media such as Diskettes and CD’s will be restricted to authorized personnel only for the installation, modification, and up-gradation purposes. Other individuals are required to seek authorization before removable media usage. Any movement of hardware equipment between organizational sites is to be executed and monitored by authorized personnel only. Individuals using business center facilities provided by service providers for organizational business purposes should ensure organizational security by removing or deleting relevant data entered into such systems. Access Control Access Control norms for networked systems must be carefully designed and approved by the management of the