Developing a good security practice is simply a matter of establishing and following some basic security procedures that suit your business needs.
Once the security policy is implemented, it needs to become an integral part of day-to-day business activities and general business culture.
You and your staff need to keep abreast of information on current Internet security issues so that the security policy you develop stays up-to-date.
Maintaining the security policy is a day-to-day business activity for everyone, for example, checking email for viruses and logging off the computer from the Internet at the end of the day.
Monitor and test the security policy you have in place to identify potential and actual security problems before they become issues that may cost your business time and money.
What you can do
In order to have and maintain a good security policy: