Company devices which are hooked to the internet can involve both internal and external connections. These internet resources can be web servers, email servers, proxy servers, routers, FTP servers or any other public-facing device which performs a service or function.

Because these resources are both generally critical for company operations and especially vulnerable to risks, threats or attacks due to their public-facing nature, setting strict guidelines for how these devices should be configured for access is a key priority to ensure business continuity and data protection.

The purpose of this customizable policy, created by Scott Matteson for TechRepublic Premium, is to provide guidelines for establishing appropriate access controls to and from internet resources.

Featured text from the download:

The following rules apply:

Only enable access to devices/systems for company business purposes.

Where applicable, physically secure these resources (or the systems they are located upon if virtual) in a data center accessible only by authorized personnel.

Ensure internet resources are behind firewalls, preferably in DMZ subnets.

Segregate critical systems from one another based on subnets and firewall rules.

Permit only the necessary access to devices based on users, permissions, roles and ports.

Securely store administrator/root account information/passwords via a centralized password management system.

Improve your business operations with our five-page policy document. Previously priced at $99, this is now available for download at just $9. Alternatively, enjoy complimentary access with a Premium annual subscription. Click here to find out more.

TIME SAVED: Crafting this content required 10 hours of dedicated writing, editing, research and design.