Fighting malware and spam

Effective security policy management

Michael D. Thacker IBM Virus CERT

Whether you have a large IT infrastructure or a small one, well defined security policies for dealing with malware and other related security threats are crucial to business continuity. Security policies not only affect the corporation, but each individual doing business with, and for the corporation. Policies require in-depth analysis of business impacts from operational, technical and financial perspectives. Defining these policies requires a delicate balance of obtaining and maintaining executive level support and commitment, adherence to business standards, legal implications, and end user education.

This track explores several policies that have been implemented at various companies of various sizes. The aim is to help attendees from companies of any size to get new ideas, as well as learn about potential mistakes and pitfalls in creating or updating security policies related to anti-virus.