Section 5: Web Presence
0501:
Internet / Intranet:
050101:
Each government organization may, further to the Lanka Government
Network (LGN) policies, have its own policies in assigning, controlling and
monitoring Internet access, and should follow the guidelines specified in the
government Information Security Policy.
050102:
Organizations should implement Internet/Intranet usage policies to guide
users on Internet/Intranet usage. Internet usage should comply with the
policies and codes of conduct of the organization.
050103:
Information access restrictions applicable to physical files should be applicable
with better audit trails and security to information available in Intranet.
Section 6: Government Network
0601:
060101
0602:
Government Network Connectivity:
All government organizations should connect to the common government
Wide Area Network infrastructure i.e. Lanka Government Network (LGN)
LAN Account Management:
060201:
LAN accounts should be created only after clearance by the organization’s
management and disabled on the same day of employee’s departure from the
organization.
060202:
Government organizations should define a standard format for the LAN
accounts and for the names of the PCs and servers in the network.
0603:
Backup Measures:
060301:
The government organization should identify and document its critical
organizational processes relating to its core business, and the critical assets
and resources involved in the organizational processes.
060302:
A plan should be developed and implemented to ensure the safety of
personnel and organizational property including information and information
processing facilities.
060303:
Adequate backup facilities should be provided to ensure that all essential
information and software can be recovered following a disaster or a media
failure.
(Also refer section 10.5 of ISO/IEC 17799)
20