Hi to everyone!!

I don't know if i'm in the right place or not but i have a question
regarding writing a security policy for a company.

The client has multiple servers running Novell 6.0 + NT PDC + Memeber
Servers windows 200x + Unix SCO servers in the environment.
They want to me to write a security policy or what are the procedure when
somebody left the company or been fired, when a high ranking IT manager who
knows all the passwords and all wants to leave or fired.
what to do??? first actions??....
examples like disable account, changing the passwords,at NT + NOVELL + UNIX
at e-mail, VPN and so on...
Ex: when been fired , the person is escorted to the door.

I need help!! i need an exisitng procedure to base on..
Please help
ant suggestions.

Re: Please Help!! Security policy by Steven

Steven
Sat Apr 30 13:30:01 CDT 2005

You can buy existing security policies. This is something must be correct as
a wrong wording of a policy can come back to haunt you or the company at a
later time. This is not my area of expertise but the weekends are usually
slow on the newsgroups so I added my two cents. The links below are to a
couple of resources I found that may help get you started. Some of these are
not cheap but then again writing a policy from scratch is not something a
company could expect to get for little cost. Good luck. --- Steve

http://www.sans.org/resources/policies/
http://www.bitpipe.com/data/rlist?t=1026754190_35796538&src=google
http://www.baselinesoft.com/
http://www.iso-17799.com/iso.htm



"James" <James@discussions.microsoft.com> wrote in message
news:95910A1B-E45D-4FB2-9CB5-04E0DE5AEB36@microsoft.com...
> Hi to everyone!!
>
> I don't know if i'm in the right place or not but i have a question
> regarding writing a security policy for a company.
>
> The client has multiple servers running Novell 6.0 + NT PDC + Memeber
> Servers windows 200x + Unix SCO servers in the environment.
> They want to me to write a security policy or what are the procedure when
> somebody left the company or been fired, when a high ranking IT manager
> who
> knows all the passwords and all wants to leave or fired.
> what to do??? first actions??....
> examples like disable account, changing the passwords,at NT + NOVELL +
> UNIX
> at e-mail, VPN and so on...
> Ex: when been fired , the person is escorted to the door.
>
> I need help!! i need an exisitng procedure to base on..
> Please help
> ant suggestions.



Re: Please Help!! Security policy by James

James
Sat Apr 30 15:42:07 CDT 2005

Does Microsoft provide any solutions for these cases??

"Steven L Umbach" wrote:

> You can buy existing security policies. This is something must be correct as
> a wrong wording of a policy can come back to haunt you or the company at a
> later time. This is not my area of expertise but the weekends are usually
> slow on the newsgroups so I added my two cents. The links below are to a
> couple of resources I found that may help get you started. Some of these are
> not cheap but then again writing a policy from scratch is not something a
> company could expect to get for little cost. Good luck. --- Steve
>
> http://www.sans.org/resources/policies/
> http://www.bitpipe.com/data/rlist?t=1026754190_35796538&src=google
> http://www.baselinesoft.com/
> http://www.iso-17799.com/iso.htm
>
>
>
> "James" <James@discussions.microsoft.com> wrote in message
> news:95910A1B-E45D-4FB2-9CB5-04E0DE5AEB36@microsoft.com...
> > Hi to everyone!!
> >
> > I don't know if i'm in the right place or not but i have a question
> > regarding writing a security policy for a company.
> >
> > The client has multiple servers running Novell 6.0 + NT PDC + Memeber
> > Servers windows 200x + Unix SCO servers in the environment.
> > They want to me to write a security policy or what are the procedure when
> > somebody left the company or been fired, when a high ranking IT manager
> > who
> > knows all the passwords and all wants to leave or fired.
> > what to do??? first actions??....
> > examples like disable account, changing the passwords,at NT + NOVELL +
> > UNIX
> > at e-mail, VPN and so on...
> > Ex: when been fired , the person is escorted to the door.
> >
> > I need help!! i need an exisitng procedure to base on..
> > Please help
> > ant suggestions.
>
>
>

Re: Please Help!! Security policy by S

S
Sat Apr 30 23:38:56 CDT 2005

Microsoft mostly creates software and provides tools and resources to run
Microsoft software. As such, security policies in general and applied to
heterogenious environments including Novell, SCO, Sun, BSD etc. systems are
clearly beyond the scope of Microsoft. You can hire an IBM consultant, or
ten, to help you with all-encompassing policy suite. But I rather recommend
you to follow Steven's links to find out quality, ready to use info.

BTW forgot to mention: policies don't work. Not unless you have ways to
enforce thm and verify compliance. That makes large parts of best-practice
policies useless in many cases.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-


"James" <James@discussions.microsoft.com> wrote in message
news:14176318-089E-4A24-99F6-B575A262B1A5@microsoft.com...
> Does Microsoft provide any solutions for these cases??
>