Questions to Ask About Security Policy

  1. If a laptop, tablet, USB, or smart phone containing company data was to be lost or stolen, how disastrous would that be for the company? Will it be ok for the competitor or the public to gain knowledge of whatever is on that device?
  2. Is it ok for everyone in the company to have access to every file? For example, it is acceptable for the receptionist to have access to the accountant’s files and the cleaning crew to have access to the CEO’s documents? 
  3. Is it acceptable for the company to allow an outsider to monitor the company’s network for passwords, client data, or other general data?