- Defining "Security Policy"
- Building a Security Policy
- The Blueprint for Happiness?
The Blueprint for Happiness?
A good security policy may not guarantee happiness, but it will certainly help an organization to protect its key information and assets. Like most projects that require significant upfront work and regular maintenance, you'll get back from such a document what you put into it.
Check out any or all of the resources that follow for more information on this fascinating and pivotal security topic.
Books:
Scott Barman. Writing Information Security Policies, New Riders Publishing, Indianapolis, IN 2001, ISBN: 157870264X.
Andress, Mandy. Surviving Security: How to Integrate People, Process & Technology, SAMS Publishing, Indianapolis, IN, 2001, ISBN: 0672321297.
Wood, Charles Cresson. Information Security Policies Made Easy Version 8, Baseline Software, Houston, TX, 2001, ISBN: 1881585077.
Examples:
SANS www.sans.org/newlook/resources/policies/policies.htm - template
Carnegie-Mellon University www.sei.cmu.edu/publications/documents/99.reports/99tr017/99tr017abstract.html
Murdoch University wwwits2.murdoch.edu.au/security/policy.html
National Institute of Health www.cit.nih.gov/oirm/security.html
Articles:
SANS Security Policy Project www.sans.org/newlook/resources/policies/policies.htm
Security Policies in the Workplace http://searchsecurity.techtarget.com/onlineEventsTranscript/0,289691,sid14_gci531240,00.html
Planning for Effective Security Policy http://searchsecurity.techtarget.com/tip/1,289483,sid14_gci511979,00.html
Standards:
BS7799 www.c-cure.org/bsframes.htm
RFC 2196 "Site Security Handbook" www.ietf.org/rfc/rfc2196.txt?Number=2196