Develop consistent standards for all departments. Consistency will limit costs and improve productivity. All machines must be secure. Perform some kind of risk assessment and risk management, preferably formal. Maintain a global, enterprise-wide security philosophy.
Global security is more effective, cheaper and less visible to users.
The primary management task of the global Internet connection is access control, beginning with the decision of who within the organization is granted access and how that access is managed. With an intranet , the focus shifts to managing the flow of information within the organization. An intranet policy must include a greater emphasis on applications security, database security and virus management. The Internet section of the employee manual needs to be developed by a group representing all business areas of the agency, IT and operations functions. A policy without provisions for enforcement is a meaningless policy.