8.1 Purpose and Goals of WLAN Security Policies

A very good source of samples of security policies is the SANS Security Policy Resource Web page [2], which is maintained by the current policy project director, Michele D. Guel [3]. SANS policy information is provided free of cost. The folks at SANS compiled those security policies originally to assist those attending SANS training programs, but because SANS feels the security of the Internet depends on vigilance by all, they have made these resources available to the entire Internet community.

Another resource the reader can consult for security policy information is RFC 2196 [4]. This handbook is one of the early guides to developing computer security policies and procedures for sites that have systems on the Internet. Its purpose is to provide practical guidance to administrators who are trying to secure their organizational information and services. Topics covered include policy content and formation, a broad range of technical system and network security topics, and security incident response.

For all security policies developed in an organization, a standard template should be used to ensure consistency of presentation and format. We have provided a generic format that we recommend for the development of your security policies. The template may be modified to suit your organizational needs. The implementation of policies, as part of an overall organizational security plan, can greatly enhance the protective posture of any organization.