Into the module entitled computer security policy when theory meets practice and this module will consider
why it's so difficult to develop an effective computer system security policy
will learn why it's so important to change one's way of thinking about computer systems security
for example
a system may be more or less protected rather than more or less secure.
There's a subtle difference in the meaning here and we'll learn how this subtlety may influence the
security policy implementation.
Moreover we will closely examine why many popular system security solutions are ineffective and why
having a security policy is so essential
that is to say regardless of how technologically advanced your security software may be the actual security
of computer systems in your company depends on having a security policy.
Without it your computers will be in much more vulnerable.
No matter what software you use
next we will briefly analyze the issue of security certification whether it's important to obtain for
your company and his computer system a certificate of conformity to certain security standards.
We'll also examine a strategy called threat modeling and learn how to look at your computer system security
from the perspective of someone who wants to break into it.
The last thing we will discuss is threat classification.
That is to say what you can expect if your system falls prey to an attack.
Let the course begin.