Contents
Copyright© 2015 .......................................................................................................................... 2
Disclaimer ...................................................................................................................................... 4
Preface ........................................................................................................................................... 5
Part 1: Security Policy Guidelines................................................................................................ 9
1.
Overview ...............................................................................................................................9
2.
Introduction...........................................................................................................................9
3.
Security Management Planning ............................................................................................. 11
4.
Security Governance ............................................................................................................. 12
5.
Security Management Concepts and Principles....................................................................... 13
6.
Data Classification ................................................................................................................ 15
Part 2: Accountability and Access Control............................................................................... 17
1.
Purpose ............................................................................................................................... 17
2.
Introduction......................................................................................................................... 17
3.
User Access Management ..................................................................................................... 19
4.
5.
3.1.
User Registration............................................................................................................ 19
3.2.
Privilege Management.................................................................................................... 19
3.3.
User Password Management .......................................................................................... 19
User Responsibilities ............................................................................................................. 20
4.1.
Password Use................................................................................................................. 20
4.2.
Password Selection......................................................................................................... 21
4.3.
Password Phrases........................................................................................................... 22
4.4.
Clear Desk and Clear Screen Policy .................................................................................. 22
Access Control to Program Source Code................................................................................. 23
Part 3: Secure Network Architecture and Network Access Control ..................................... 24
1.
Purpose ............................................................................................................................... 24
2.
Introduction......................................................................................................................... 24
3.
Network and Protocol Security Mechanisms .......................................................................... 25
4.
Network Access Control ........................................................................................................ 25
4.1.
Policy on Use of Network Services ................................................................................... 26
Lebanese National Security Policy Guidelines v1.7
Page
6|