Password Protection Policy
Defines standards for creating, protecting, and changing strong passwords.
Remote Access Policy
The purpose of this policy is to define standards for connecting to a corporate network from any host.
Risk Assessment Policy
Defines the requirements and provides the authority for the information security team to identify, assess, and remediate risks to the organization's information infrastructure associated with conducting business. [pdf format.]
Router Security Policy
Sample policy establishing the minimum security requirements for all routers and switches connecting to production networks.
Sample ISO 27001 Policies
A policy template aligned with this emerging standard.
Sample Policies
Sample Perimeter Defense and Vulnerability Assessment Policies.
Sandstorm Modem Policy
This policy is designed to be an addition to an existing corporate security policy. It can be an addition to a Remote Access Policy, if one exists, or to simply stand alone as a Modem Access policy if no current policy of this sort exists at the Company.
SANS Sample Security Policies
Policy templates for twenty-four important security requirements.
Server Security Policy
Defines standards for minimal security configuration for servers inside the organization's production network, or used in a production capacity.
Third Party Connection Agreement
Sample agreement for establishing a connection to an external party.
University of Colorado Email Policy
This administrative policy statement sets forth the University's policy with regard to use of, access to, and disclosure of electronic mail to assist in ensuring that the University's resources serve those purposes.
Virtual Private Network Policy
Defines the requirements for Remote Access IPSec or L2TP Virtual Private Network (VPN) connections to the organization's network.
Wireless Communication Policy
Sample policy controlling the use of unsecured wireless communications technology.
Acceptable Encryption Policy
Defines requirements for encryption algorithms used within the organization. [PDF]
Acceptable Use Policy
Defines acceptable use of equipment and computing services, and the appropriate employee security measures to protect the organization's corporate resources and proprietary information. [PDF]
Acceptable Use Policy Report
This is a report on the Acceptable Usage Policy: what corporations expect of it, an instance of a commercially used policy, and a framework for creating your own policy.
Acquisition Assessment Policy
Defines responsibilities regarding corporate acquisitions, and defines the minimum requirements of an acquisition assessment to be completed by the information security group. [PDF]
Analog/ISDN Line Policy
Defines standards for use of analog/ISDN lines for Fax sending and receiving, and for connection to computers. [PDF]
Anti-Virus Guidelines
Defines guidelines for effectively reducing the threat of computer viruses on the organization's network.
Application Service Provider Policy
Defines minimum security criteria that an ASP must execute in order to be considered for use on a project by the organization.
Results: Previous 1 2 3 4 5 6 Next
Site
Menu 
