1 / 19

IT POLICY SYSTEM DEVELOPMENT AND DEPLOYMENT

IT POLICY SYSTEM DEVELOPMENT AND DEPLOYMENT. Case Study: Kaon Security Ltd and Nillumbik Shire Council. WHO ARE WE?. KAON SECURITY LTD Formed in 2004 Specialise in IT Policy Development, IT Auditing and Consulting Over 50 IT Policy Customers in both NZ and

diep
Download Presentation

IT POLICY SYSTEM DEVELOPMENT AND DEPLOYMENT

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. IT POLICY SYSTEM DEVELOPMENT AND DEPLOYMENT Case Study: Kaon Security Ltd and Nillumbik Shire Council

  2. WHO ARE WE? KAON SECURITY LTD Formed in 2004 Specialise in IT Policy Development, IT Auditing and Consulting Over 50 IT Policy Customers in both NZ and Australia Better known for our role in helping Ballarat City Council and Golden Plains Shire Council manage the 2010 security breach

  3. POLICY • Needs to be accessible to all • Appropriate to the organisation • Reviewed regularly • Meet organisational regulatory compliance and • legislative requirements • Policy defines the “What” and “Who” • Procedure defines the “How” • Critical to managing your IT environment

  4. INFORMATION SYSTEMS SECURITY CYCLE

  5. WHY OUTSOURCE? • Policy development is time consuming • Low on the priority “to do” list • Hard to get started with a blank canvas • Writing Policy is not exciting, its not cool and its • not going to make you popular with the user • community • IT doesn’t want to appear as the “IT Police” • The IT - HR disconnect • Regulatory compliance adds complexity • Auditors and Risk Managers requirements

  6. POLICY An example of good policy documentation Nillumbik Shire Council Information and Technology Policy System (Note: These slides are a partial extract from the system)

  7. NILLUMBIK SHIRE COUNCIL How We Got There Trish Spiteri

  8. NILLUMBIK SHIRE COUNCIL The Process with Kaon Security Questionnaire completed First draft prepared Onsite review conducted over 2 days Final version received Maintenance to allow further changes anytime Implementation guidelines provided

  9. NILLUMBIK SHIRE COUNCIL Benefits Cost effective and saves time Simple process that delivers an end result Review process identifies gaps between policy and practice Links policy, procedure and other documents Easy to deploy No training required for users IT Policies accessible to all Consistent rules and guidelines across Council Maintenance options to keep up to date Big tick from Auditors

  10. THE END Contacts Kaon Security Ltd – www.kaonsecurity.com Jackie Krzyzewski - jackiek@kaon.co.nz Nillumbik Shire Council Trish Spiteri – Trish.Spiteri@nillumbik.vic.gov.au

More Related