Chapter 10. Organizational Security

Terms you'll need to understand:

• Access control

• Social engineering

• Business continuity

• Disaster recovery

• Security policies

• Acceptable use

• Due care

• Separation of duties

Techniques you'll need to master:

• Knowing the common areas of concern when planning for physical security of network resources

• Understanding how social engineering may be used to obtain unauthorized access

• Recognizing the more common security policy planning categories

Network security and system hardening provide the strongest possible levels of security against directed attacks, but organizational security must also be considered when planning an organization's data security. This chapter examines the issues surrounding physical security, disaster recovery, and security policies that improve network security to those areas "beyond the wire."