book

Information Security Policies, Procedures, and Standards

Name: Information Security Policies, Procedures, and Standards
Author: Douglas J. Landoll
ISBN: 9781482245912

by Douglas J. Landoll

March 2017

Intermediate to advanced

254 pages

5h 43m

English

Auerbach Publications

Read now

Unlock full access

Cover
Half Title
Title Page
Copyright Page
Dedication
Table of Contents
PREFACE
AUTHOR
CHAPTER 1 INTRODUCTION
1.1 No Short Cuts1.2 Top-Down Security1.3 Current State of Information Security Policy Sets1.4 Effectiveness of Information Security Policy SetsExercises
CHAPTER 2 INFORMATION SECURITY POLICY BASICS
2.1 Information Security Policy Types2.1.1 Information Security Policies2.1.2 Information Security Standards2.1.3 Information Security Guidelines2.1.4 Information Security Baselines2.1.5 Information Security ProceduresExercises

CHAPTER 3 INFORMATION SECURITY POLICY FRAMEWORK
3.1 Information Security Policy Sets without Frameworks3.2 Information Security Policy Sets with Frameworks3.3 Common Information SPFs3.3.1 FISMA Framework3.3.1.1 Using the FISMA Framework as a Policy Framework3.3.1.2 Benefits of the FISMA Security Controls Framework3.3.2 ISO 27001:2013 Framework3.3.2.1 Using the ISO 27001/2 Framework as a Policy Framework3.3.2.2 Benefits of the ISO 27001/2 Security Controls Framework3.3.3 COBIT Framework3.3.3.1 Using the COBIT Framework as a Policy Framework3.3.3.2 Benefits of the COBIT Security Controls Framework3.3.4 HMG ISPF Framework3.3.4.1 Using the HMG ISPF as a Policy Framework3.3.4.2 Benefits of the HMG ISPF3.4 Tailoring Information SPFs3.4.1 Customer and Business Requirements3.4.2 Importance of Completeness3.4.3 Adding and Mapping Regulations3.5 Deriving a Policy Set from a FrameworkExercises
CHAPTER 4 INFORMATION SECURITY POLICY DETAILS
4.1 Front Matter4.2 Policy Statements4.2.1 Back Matter4.2.2 Policy Requirement Exceptions4.3 Specific Information Security Policies4.3.1 Organizational-Level Policies4.3.2 Security Program-Level Policies4.3.3 User Security Policies4.3.4 System and Control Policies4.4 Policy Document ExamplesExercises
CHAPTER 5 INFORMATION SECURITY PROCEDURES AND STANDARDS
5.1 Less Formal Language and Structure5.2 Various Purposes of the Standard and Guideline5.3 Information Security ProceduresExercises
CHAPTER 6 INFORMATION SECURITY POLICY PROJECTS
6.1 Scoping the Project6.2 Information Security Policy Project Roles6.3 Information Security Policy Project Phases6.4 Information Security Policy Revision Project6.5 Information Security Policy Project ApplicationExercises
APPENDIX A: EXAMPLE POLICIES (FISMA FRAMEWORK)
APPENDIX B: EXAMPLE DEPARTMENTAL POLICY TAILORING GUIDE
INDEX

Content preview from Information Security Policies, Procedures, and Standards

INFORMATION SECURITY PROCEDURES AND STANDARDS

The bulk of this book addresses information security policies—frameworks, statements, review, and projects. For the most part, all of the advice and guidance applied to information security policies (e.g., frameworks, terms, and audience) can also be applied to procedures and standards as well. This chapter addresses the specific elements of information security procedures and standards that are unique.

5.1 Less Formal Language and Structure

The formal language of information security policies (e.g., use of the term shall) may be dropped from these more detailed documents. Information security procedures and standards are not the formal documents of policy that need to stick with legal terms and ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Security Program and Policies: Principles and Practices, Second Edition

Publisher Resources

ISBN: 9781482245912

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Information Security Policies, Procedures, and Standards

by Douglas J. Landoll

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.