Security

Ask something
Discussion Locked

Security Policies

0 helpful
4 replies

by egibson

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

My company is approaching an audit, and due to lack of resources over the last 2 years some of the documentation has failed to be completed, such as security policies. Does anyone have a security policy template that would be a good starting point for me so I do not have to recreate the wheel? Any help would be appreciated.

Thanks in advance,

Eddie

4 replies

by mm-tweed

I am busy with the same issue - except it is for a new group of companies. One can use expereince only and some background word - but the time !!

Will also preciatesame help - even if it is suggested lay-out and topics covered.

MM

by ikaufman

I would check out the website of a major university. Usually they have links to Acceptable Use and General Use policies.
Also, check out Practical UNIX and Internet Security (published by O'Reilly). It has some good resources for implementing policies.

Ian

by kg70

Try searching for information about HIPAA's new proposed rule for Security and Electronic Signatures. This will give you a good base.

I have been researching this topic also. The British have a formal government document that has been useful.
The problem with security policies is that they can be used to help fingerprint your system, which is the first thing any hacker will do. Please keep this in mind when writing and posting your policies.

Good luck!

This discussion is closed to new replies.