Hi,
The best sources for policy and procedure are based on ISO17799, the common
standard of security industries. However if you lookin for some sort of
security policy template, you could try RuSecure - Information Security
Policies at www.rusecure.co.uk. It's a collection of security policies
template based on ISO17799, but it's not free.
SANS also good source for policy reference :
http://www.sans.org/resources/policies.
good luck.
Arif Jatmoko
|+-------------------------------+----------------------------------------|
|| "Miller, Joseph" | |
|| <Joseph_Miller@jeffersonwell| To: |
|| s.com> | <security-management@securityfocus.co|
|| | m> |
|| 01/13/2005 06:12 AM | cc: (bcc: Arif |
|| | Jatmoko/IDN/SEA/CCA) |
|| | Subject: Reviewing |
|| | Policies and Procedures |
|| | |
|+-------------------------------+----------------------------------------|
Hello,
I am a rookie at reviewing policies and procedures for information security
and IT controls. Is there an online resource I can use to locate a
checklist of P-n-Ps? One of my tasks is to assure that all network
infrastructure, server and mainframe subject matters are addressed?
Joe Miller
Jefferson Wells
Project Professional
Technology Risk Management
(480)540-3588
-----------------------------------------
********* Internet Email Confidentiality *********
The information contained in this message may be privileged and
confidential and protected from disclosure. If the reader of this message
is not the intended recipient, or an employee or agent responsible for
delivering this message to the intended recipient, you are hereby notified
that it is strictly prohibited (a) to disseminate, distribute or copy this
communication or any of the information contained in it, or (b) to take any
action based on the information in it. If you have received this
communication in error, please notify us immediately by replying to the
message and deleting it from your computer.
______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
