Govern the security of your organization’s production equipment used in an internet-facing environment with the best-practice procedures in this policy.

This policy is designed to minimize potential exposure to a company from the loss of sensitive or company confidential data, intellectual property, damage to public image, etc., which may follow from unauthorized use of company resources. All devices that are part of an internet-facing production infrastructure owned and operated by a company are covered by this policy. These devices (network and host) are particularly vulnerable to attack from the internet, as they are highly visible and part of an advertised service.