Prompt: What principles should the information security analyst apply in order to develop appropriate basic user policies for the client? Make sure you address confidentiality, integrity, and availability of information, as well as each of the following questions:

• When and why should users have to display some type of identification while in the workplace?
• What types of physical access (with or without ID) to company areas is acceptable? Why?
• When and why should employees with identification be allowed access to all areas of the company?

When and why should employees be allowed to take work home or bring guests into the workplace?