Security: Policy

Article discusses the elements of a corporate security policy, which it calls the gateway to a company`s intellectual property. The main threat to information security within a company is its employees.

Best Practices in Network Security

Knowing how and what to protect and what controls to put in place is difficult. It takes security management, including planning, policy development and the design of procedures.

Browsing with a Loaded Gun

A strong web Security Policy is key to keeping your company safe in the net-centric world. (PDF format)

Building and Implementing a Successful Information Security Policy

White paper providing the reader with new and innovative aspects on the process of building a Security Policy, as well as managing a Security Awareness Program.

Building Effective, Tailored Information Security Policy

20th NISSC Internet Technical Security Policy Panel

Canada's Export Controls

Unofficial / unverified article describing Canada's export controls on cryptographic software.

CERT Practice Modules: Improving Security

Determine contractor ability to comply with your organization's security policy.

CERT Practice Modules: Responding to Intrusions

Establish policies and procedures for responding to intrusions.

CERT Practice Modules: Securing Desktop Workstations

Develop and promulgate an acceptable use policy for workstations.

CobiT User Group

International user group and hub for CobiT, the emerging IT control and security methodology.

Common Criteria Evaluation and Validation Scheme

The US government agency overseeing the Common Criteria security certification Program

Computer and Information Security Policy

Formal IT security policy helps establish standards for IT resource protection by assigning program management responsibilities and providing basic rules, guidelines, and definitions for everyone in the organization. Policy thus helps prevent inconsistencies that can introduce risks, and policy serves as a basis for the enforcement of more detailed rules and procedures.

Create Order with a Strong Policy

A well-written, well-run security policy prevents cracks from appearing in your network's foundation.

Developing an Information Security Strategy

This whitepaper describes the steps needed to develop an organization-wide information security strategy.

Do you have an intrusion detection response plan?

Discussion of what should go into the creation of an intrusion detection plan and the expected results.

E-Policy

E-policy is a corporate statement and set-of-rules to protect the organization from casual or intentional abuse that could result in the release of sensitive information, IT system failures or litigation against the organization by employees or other parties.

Formulating a Wireless LAN Security Policy: Relevant Issues, Considerations and Implications

[Word Document] This paper represents the security issues related to the use of wireless (vs wired) LAN technology and recommends a number of key implementation guidelines to ensure the secure deployment of wireless LAN services in the company.

1 2 3 [>>]