Hi,
Some sample policies that can go in.. fyi.
Check out BS7799 or ISO 17799 standard for how to write a sec policy.
____________________________________________________
A sample TOC for a Security Policy for an Enterprise
++++++++++++++++++++++++++++++++++++++++++++++++++++
Purpose of the security policy
Scope of the security policy
Intended Audience
Security Organization
Security Organizational Structure
Roles and Responsibilities
Asset classification
Asset Inventory
Risk Profile
Information classification and Handling
Incident Handling Policy
Personnel Security
Security Training
Non Disclosure Agreement
Security Responsibilities
Termination / Change of Responsibilities
Physical Security Policy
Third Party Access Policy
Access Control Policy
Usage Policy
Application Security
Database Security
Operating System Security
Network Security
Backup Policy
Disaster Recover Policy
Change Management
Security Maintenance
Rdgs,
SJ
_________________________________________________
Shoney Joy
Consultant - Security
Bangalore Labs
level-7& 8, Innovator, International Tech Park
Bangalore, India - 560-066
-------------------------------------------
[EMAIL PROTECTED]
Ph - +91-80-8410-801
Fax - +91-80-8410-808
www.bangalorelabs.com
-----Original Message-----
From: Holt, Greg [mailto:[EMAIL PROTECTED]]
Sent: Thursday, 20 September, 2001 7:23 PM
To: '[EMAIL PROTECTED]'
Subject: Acceptable Use/Security Policies
New Guy Here
I've recently taken over as the LAN administrator for my company. I am
looking for ideas on setting up proper Acceptable Use and Security Policies
Can anyone point me to some examples of Enterprise Acceptable Use Policies
and Security Policies?
Thanks in advance.
Shaggy
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
