Search results

...uration file enforcing the password parameters as defined by the corporate policy document: '''Technical Standard – Access Controls.'''<br> <p><font color=#008000>Passwords on all platforms adhere to the corporate policy document: '''Technical Standard – Access Controls.'''</font></p><br> ...

...cknowledge in writing they have read and understood the company’s security policy and procedures.''' ISO 3.1 Information security policy<br> ...

...ly customizable versions are available from [http://policy-machine.com The Policy Machine].<br> ...

...tion_and_Classification_Policy:|'''Asset Identification and Classification Policy''']], and provides specific instructions and requirements for classifying i ...e not to exceed five (5) years unless otherwise required by law or Company policy.<br> ...

...ss, legal, and/or regulatory purposes, as documented in the data retention policy.'''<br> ...

== Requirement 12: Maintain a policy that addresses information security. == *A strong security policy sets the security tone for the whole company, and lets employees know what ...

...dard builds on the objectives established in the [[Sample Asset Protection Policy:|'''Sample Asset Protection Standard''']], and provides specific auditing a ### Change security policy or configuration settings ...

ISO 17799 3.1 Information security policy.<br> ISO 17799 12.2 Reviews of security policy and technical compliance.<br> ...

...ly customizable versions are available from [http://policy-machine.com The Policy Machine].<br> ...

...in a set of policies to support IT strategy. These policies should include policy intent, roles and responsibilities, exception process, compliance approach * ISO 17799 3.1 Information security policy 6.1 Security in job definition and resourcing.<br> ...

This Asset Protection Policy defines Company objectives for establishing specific standards on the prote ...been granted access to Company information or systems, are covered by this policy and must comply with associated standards and guidelines.<br> ...

...al review of the code-based policies is recommended. Without a P3P Privacy Policy in place, a site’s cookies could be blocked or impaired by Internet Explore ...

ISO 17799 3.1 Information security policy.<br> ISO 12.2 Reviews of security policy and technical compliance.<br> ...

...' Protecting Special Access Program Information Within Information Systems policy excerpt: [[Media:JAFAN_6_3.pdf]]<br> :Discusses how computer security funds should be allotted into various areas: policy, awareness and training, risk assessment, technology, and process.<br> ...

===Compliance Oriented Policy Samples=== :1. [[Security_Policy:|'''ISO Security Policy''']]<br> ...

...Company") [[Sample Security Awareness Policy:|'''Sample Security Awareness Policy''']] defines objectives for establishing a formal Security Awareness Progra ...ed in the [[Sample Security Awareness Policy:|'''Sample Security Awareness Policy''']], and provides specific instructions and requirements for providing app ...

...t. Any accounts that remain should be investigated as they are most likely policy violations and a breakdown in the segregation of duties has occurred.<br> ...to current system accounts should be investigated as they are most likely policy violations and the result of a breakdown with segregation of duties or poss ...

*[[Network security policy]] ...

...' (the "Company") [[Sample Acceptable Use Policy:|'''Sample Acceptable Use Policy''']] defines objectives for establishing specific standards on the appropri ...stablished in the [[Sample Acceptable Use Policy:|'''Sample Acceptable Use Policy''']], and provides specific instructions and requirements on the proper and ...

The '''<Your Company Name>''' (the "Company") [[Sample Asset Management Policy:|'''Sample Asset Management Standard''']] defines objectives for establishi ...dard builds on the objectives established in the [[Sample Asset Management Policy:|'''Sample Asset Management Standard''']], and provides specific instructio ...

...ss, legal, and or regulatory purposes, as documented in the data retention policy.]]<br> ...

==Business Continuity Management Policy Samples== ...ished in the Asset Protection Policy, and Threat Assessment and Monitoring Policy.<br> ...

...ting that they have read and understood the company’s information security policy. ...

...ly customizable versions are available from [http://policy-machine.com The Policy Machine].<br> ...

...ly customizable versions are available from [http://policy-machine.com The Policy Machine].<br> ...

...review and approval of appropriate organization-wide information security policy<br> ...rity policy, including external review as appropriate, and updating of the policy as needed<br> ...

:'''Ensure the security policy and procedures clearly define information security responsibilities for all ...

:* Obtain and examine the modem usage policy and verify that it specifies and or requires: ...

:* Obtain and examine the modem usage policy and verify that it specifies and or requires: ...

:* Obtain and examine the modem usage policy and verify that it specifies and or requires: ...

:::a. [[SOX.2.0.17:|'''SOX.2.0.17''']] An information security policy exists and has been approved by an appropriate level of executive managemen ...standards has been developed that supports the objectives of the security policy. ...

:* Obtain and examine the modem usage policy and verify that it specifies and or requires: ...

==Guidance Towards Establishing an Enterprise Wide Open-Source Usage Policy== A well-defined, supported, enforced management policy maximizes the rewards and minimizes the risks of the open-source software m ...

:* Obtain and examine the modem usage policy and verify that it specifies and or requires: ...

:* Obtain and examine the modem usage policy and verify that it specifies and or requires: ...

...ly customizable versions are available from [http://policy-machine.com The Policy Machine].<br> ...

:* Obtain and examine the modem usage policy and verify that it specifies and or requires: ...

...gy. The Information Security Committee is comprised of lawyers, government policy and management professionals, information technology and security professio ...advice on the how and why of auditing firewalls, including a discussion of policy, design, audit, and tools.<br> ...

:* Obtain and examine the modem usage policy and verify that it specifies and or requires: ...

:* Obtain and examine the modem usage policy and verify that it specifies and or requires: ...

:* Obtain the periodic media destruction policy and verify it covers all media with cardholder data. ...

...ether they have been reexamined. Obtain the organization’s access security policy and discuss with those responsible whether they follow such standards and g ...

...and documented in accordance with the organization's information security policy.<br> * Act in accordance with the organization's information security policy, including execution of processes or activities particular to the individua ...

'''PO 6.1 IT Policy and Control Environment'''<br> * ISO 17799 3.1 Information security policy.<br> ...

:::'''PCI-4.2 B:''' Verify existence of a policy stating that cardholder data is not to be sent via unencrypted emails.<br> ...

::'''PCI-7.1:''' Obtain the written policy for data control, and determine that it includes the following:<br> ...

...he "Company") [[Sample Asset Protection Policy:|'''Sample Asset Protection Policy''']] defines objectives for establishing specific standards for protecting ...lished in the [[Sample Asset Protection Policy:|'''Sample Asset Protection Policy''']], and provides specific instructions and requirements for proper contro ...

...' (the "Company") [[Sample Acceptable Use Policy:|'''Sample Acceptable Use Policy''']] defines objectives for establishing specific standards on the appropri ...stablished in the [[Sample Acceptable Use Policy:|'''Sample Acceptable Use Policy''']] ...

...objectives and support the objectives established in the Asset Protection Policy.<br> ...bjectives and builds on the objectives established in the Asset Protection Policy by providing specific requirements for physical access to information asset ...

...onsider if they have been configured in accordance with the organization’s policy. ...