Designing secure intranets

There is no doubt that a secure intranet can be built now with existing technology, and that such an intranet could be replicated and scaled throughout an organisation to provide a set of managed information services. The principal security issues are in the policy and procedural areas, rather than in technological ones. They centre on the policies for and architectures of secure information management and sharing, the architectures of security domain structures, policies for and operations of directories of names and addresses, and appropriate domain name system configurations, policies and operations of security auditing, cryptographic management and security incident management.