Information Security Discussion of topic with security policies and baseline standards information. Site Security Policy Development Article by Rob McMillan outlining the importance and characteristics of a good security policy. This article is slightly dated, but provides a good starting point. This is primarily for security managers and system administrators. This is Part 4 of a 5 part tutorial on Internet and network security.
Policy is the often over-looked component of all good corporate information security programs.
The electronic resource usage and security policy for the University of Pennsylvania. BS 7799 is intended to serve as a single reference point for identifying a range of controls needed for most situations where information systems are used in industry and commerce, and to be used by large, medium and small organizations. It was significantly revised and improved in May 1999. This is a solid site with a good overview of all factors which should go into to the design of a security policy. Securing Desktop Workstations Develop and promulgate an acceptable use policy for workstations.