bảo vệ. Việc phân loại rộng rãi nhất được biết đến của thông tin được thực hiện bởi chính phủ và quân sự, phân loại thông tin vào các loại như bí mật bí mật, bí mật, và hàng đầu. Các doanh nghiệp có mong muốn tương tự như bảo vệ thông tin, nhưng có thể sử dụng các loại như công khai releasable, | SY0 - 201 protection. The most widely known classification of information is that implemented by the government and military which classifies information into categories such as confidential secret and top secret. Businesses have similar desires to protect information but can use categories such as publicly releasable proprietary company confidential or for internal use only. Each policy for a classification of information should describe how it should be protected who may have access to it who has the authority to release it and how it should be destroyed. All employees of the organization should be trained in the procedures for handling the information that they are authorized to access. Discretionary and mandatory access control techniques use classifications as a method to identify who may have access to what resources. Acceptable Use An acceptable use policy AUP outlines what the organization considers to be the appropriate use of company resources such as computer systems e-mail Internet and networks. Organizations should be concerned with the personal uses of organizational assets that do not benefit the company. The goal of the policy is to ensure employee productivity while limiting organizational liability through inappropriate use of the organization s assets. The policy should clearly delineate what activities are not allowed. Issues such as the use of resources to conduct personal business installation of hardware or software remote access to systems and networks the copying of company-owned software and the responsibility of users to protect company assets including data software and hardware should be addressed. Statements regarding possible penalties for ignoring any of the policies such as termination should also be included. Internet Usage Policy In today s highly connected environment employee use of access to the Internet is of particular concern. The goal for the Internet usage policy is to ensure maximum employee productivity and to limit .
