Application Service Provider Standards
Sample set of minimum security standards that an application service provider must meet to be considered for use by a corporation.
Audit Policy
Defines the requirements and provides the authority for the information security team to conduct audits and risk assessments to ensure integrity of information/resources, to investigate incidents, to ensure conformance to security policies, or to monitor user/system activity where appropriate.
Automatically Forwarded Email Policy
Documents the requirement that no email will be automatically forwarded to an external destination without prior approval from the appropriate manager or director.
Company Email Policy
Every company needs to establish a policy regarding use of and access to company email systems -- and then tell all employees what its policy is.
Computing Policies
The electronic resource usage and security policy for the University of Pennsylvania.
Database Password Policy
Defines requirements for securely storing and retrieving database usernames and passwords.
Dial-in Access Policy
Sample policy controlling the use of dial-in connection to corporate networks.
DMZ Lab Security Policy
Sample policy establishing the minimum security requirements of any equipment to be deployed in the corporate DMZ.
Extranet Policy
Defines the requirement that third party organizations requiring access to the organization's networks must sign a third-party connection agreement. [PDF, 80 KB]
Information Sensitivity Policy
Sample policy to assist users to assign sensitity levels to information they own.
Internal Lab Security Policy
Defines requirements for internal labs to ensure that confidential information and technologies are not compromised, and that production services and interests of the organization are protected from lab activities.
Internet DMZ Equipment Policy
Sample policy defining the minimum requirement for all equipment located outside the corporate firewall.
Lab Anti-Virus Policy
Defines requirements which must be met by all computers connected to an organization's lab networks to ensure effective virus detection and prevention.
Password Protection Policy
Defines standards for creating, protecting, and changing strong passwords.
Remote Access Policy
The purpose of this policy is to define standards for connecting to a corporate network from any host.
Risk Assessment Policy
Defines the requirements and provides the authority for the information security team to identify, assess, and remediate risks to the organization's information infrastructure associated with conducting business. [pdf format.]
Router Security Policy
Sample policy establishing the minimum security requirements for all routers and switches connecting to production networks.
Sample ISO 27001 Policies
A policy template aligned with this emerging standard.
Sample Policies
Sample Perimeter Defense and Vulnerability Assessment Policies.
Sandstorm Modem Policy
This policy is designed to be an addition to an existing corporate security policy. It can be an addition to a Remote Access Policy, if one exists, or to simply stand alone as a Modem Access policy if no current policy of this sort exists at the Company.
Results: Previous 1 2 3 4 5 6 Next
Site
Menu 
