d

Policy: The Complete Documentation

• This category contains 4 Papers
• The last paper was added on 2007-03-26 (YYYY-MM-DD)

Acceptable Use Policy Document

Published on 2003, by Raymond Iandolo, ©SANS Institute.

Corporate information and information resources shall be used in an approved, ethical,and lawful manner to avoid loss or damage to Corporate operations, image, or financial interests and to comply with official acceptable use policies and procedures. Personnel shall contact the chief information security officer (CISO) prior to engaging in any activities not explicitly covered by these policies.

Developing Security Policies For Protecting Corporate Assets

Published on 2001, by Jasu Mistry, ©SANS Institute.

The Digital revolution of the 21st Century has not been achieved without its consequences. Real time business requirements and economic drivers have forced rapid changes to the methods used to conduct business-to-business and business to client communication. The Internet has now become a convenient and economic deployment medium for global business.

Information Security Policy Development Guide for Large Companies

Published on 2003-11-18, by Sorcha Canavan, ©SANS Institute.

Although the importance of information security for businesses is increasingly recognized, the complexity of issues involved means that the size and shape of information security policies may vary widely from company to company. This may depend on many factors, including the size of the company, the sensitivity of the business information they own and deal with in their marketplace, and the numbers and types of information and computing systems they use. For a large company, developing a single policy document that speaks to all types of users within the organization and addresses all the information security issues necessary may prove impossible. A more effective concept is to develop a suite of policy documents to cover all information security bases; these can be targeted for specific audiences, making a more efficient process for everyone.

This paper examines the elements that need to be considered when developing and maintaining information security policy and goes on to present a design for a suite of information security policy documents for a large company.

Security Policy: What it is and Why - The Basics

Published on 2003-02-18, by Joel S. Bowden, ©SANS Institute.

To start off I would like to insert a quote from the GIAC Basic Security Policy Ver. 1.4 February 27, 2001. I have been trying to put into words what a good security policy is and what it does. After reading the above-mentioned material I couldn’t find a better definition.