ABC Credit Union ABC Credit Union/Bank Security Management Policy Policy Statement This Security Management Policy establishes guidelines for the management and separation of duties within the seven domains of the IT infrastructure of Regional ABC Credit Union/Bank. The policy aims to ensure compliance with the Gramm- Leach-Bliley Act (GLBA) and IT security best practices while addressing the specific needs and objectives of the organization. Purpose/Objectives The purpose of this policy is to establish guidelines for the management and separation of duties across the seven domains of the IT infrastructure within ABC Credit Union/Bank. Ensure the security, confidentiality, integrity, and availability (C-I-A) of information assets. Facilitate compliance with GLBA and IT security best practices. Mitigate risks associated with unauthorized access, data breaches, and system vulnerabilities. Scope This policy applies to all employees, contractors, and third-party vendors who have access to ABC Credit Union/Bank's IT assets and systems. Domains impacted: -User Domain -Workstation Domain -LAN Domain -WAN Domain -Remote Access Domain -System/Application Domain -LAN-to-WAN domain IT assets within the scope of this policy include: -Workstations -Servers -Network infrastructure -Remote access solutions -Applications and systems -Data storage devices Standards This policy aligns with the organization's Workstation Configuration Standards, Server Configuration Standards, Network Infrastructure Standards, and Data Security Standards. Procedures -User Domain: Responsibility: All employees and authorized users Users are responsible for adhering to security policies and procedures, including password management and reporting security incidents.
