When employees are not thoroughly briefed on the risks and best practices of Internet use, they are liable to make improper use of business facilities, misrepresent the company, divulge its intellectual property, or expose the company to security and privacy breaches. Lack of thorough procedures around technology management, access, and security can degrade both the performance of Web sites and the image of the company.
Internet technologies are inherently flexible, and the Internet scene is fast changing.
We found that Internet policy can never be complete, and that policy implementation may be equal parts art and science. Create a strong, cross-functional steering committee to oversee the evolution of Internet policy, monitor the business value of Internet content, and manage the corporation s exposure to risk. Adjust methods of enforcement from strict standards on security to spot-checks on Internet usage to fit the nature of the work and level of risk. Absolute standards are often overkill. This Re.sults report delivers a recommended manual of corporate Internet and intranet policies and procedures covering usage, content, technology, and security.