SANS Renews Library of Information Security Policy Templates
SANS has always been a great resource for security.
The SANS Institute today released twenty-seven completely refreshed information security policy templates that corporations and government agencies can use to ensure their security policies are practical, up-to-date and reflect real-world experience.
The release of new policy templates updates one of SANS’ most popular services for the security community. SANS’ policy template library has been used by at least 10,000 unique visitors each month for over a decade. The update announced today is a complete refresh of the policy library - removing policies that are no longer needed, adding policies to deal with new technologies and new threats, and updating the remaining policies to reflect changes in practice.
The update reflects the consensus of a team of industry professionals chaired by Michele D. Guel, a Senior Security Architect and Distinguished IT Engineer at Cisco Systems. Michele is a 26-year veteran of the cybersecurity industry and has been an advocate and supporter of the SANS community since its inception.
Although the policy templates were developed primarily to serve the 125,000 SANS alumni, SANS makes these resources available to all security managers and practitioners, at no charge. The templates may be downloaded from the SANS Security Policy Project site at sans.org.
What’s included?
For general policies, policy titles include Acceptable Use, Acceptable Encryption, Password Construction, Password Protection, Email Use, Disaster Recovery Plans, and Security Response Plans.
For network security policies, users will find templates for policies regarding Remote Access, Router and Switch Security, Wireless Communications and Standards, and the Assessment of Potential Acquisitions.
For server security, users will find templates for policies covering Database Credentials, Technology Equipment Disposal, Lab Security, and Software Installation.
The templates database also includes a Web Application Security Policy template.
More: SANS Renews Library of Information Security Policy Templates