requirement
Click on the red underlined text to get to the source
... The main purpose of a security policy is to inform users, staff and
managers of their obligatory requirements for protecting technology
and information assets. The policy should specify the mechanisms
through which these requirements ...
... requirements for protecting technology
and information assets. The policy should specify the mechanisms
through which these requirements can be met. Another purpose is to
provide a baseline from which to acquire, configure and audit
computer systems and networks ...
...
There may be regulatory requirements that affect some aspects of your
security policy (e.g., line monitoring). The creators of the
...
...
Each of these models can be applied to different portions of the
site, depending on functionality requirements, administrative
control, site policy, etc. For example, the policy may be to use the
"allow all" model when setting up ...
...
There are many types of services and each has its own security
requirements. These requirements will vary based on the intended use
of the service ...
... There are many types of services and each has its own security
requirements. These requirements will vary based on the intended use
of the service. For example, a service ...
... services deliberately
made available to users outside a site) will, in general, have
protection requirements which differ as previously described. It is
therefore wise to isolate the internal services to one set of server
...
... National Computer Security Center, "Technical Rationale Behind CSC-STD-003-85: Computer Security Requirements", CSC-STD-004-85, NCSC, 25 June 1985. ...