Policies that protect against abuses:
– Establish boundaries of acceptable and unacceptable behavior
– Enable management to punish violators
• Policy components include:
– Defining and limiting the appropriate use of IT resources
– Establishing guidelines for use of company software
– Structuring information systems to protect data and information
– Installing and maintaining a corporate firewall