book

Information Security Policies, Procedures, and Standards

Name: Information Security Policies, Procedures, and Standards
Author: Douglas J. Landoll
ISBN: 9781482245912

by Douglas J. Landoll

March 2017

Intermediate to advanced

254 pages

5h 43m

English

Auerbach Publications

Read now

Unlock full access

Cover
Half Title
Title Page
Copyright Page
Dedication
Table of Contents
PREFACE
AUTHOR
CHAPTER 1 INTRODUCTION
1.1 No Short Cuts1.2 Top-Down Security1.3 Current State of Information Security Policy Sets1.4 Effectiveness of Information Security Policy SetsExercises
CHAPTER 2 INFORMATION SECURITY POLICY BASICS
2.1 Information Security Policy Types2.1.1 Information Security Policies2.1.2 Information Security Standards2.1.3 Information Security Guidelines2.1.4 Information Security Baselines2.1.5 Information Security ProceduresExercises

CHAPTER 3 INFORMATION SECURITY POLICY FRAMEWORK
3.1 Information Security Policy Sets without Frameworks3.2 Information Security Policy Sets with Frameworks3.3 Common Information SPFs3.3.1 FISMA Framework3.3.1.1 Using the FISMA Framework as a Policy Framework3.3.1.2 Benefits of the FISMA Security Controls Framework3.3.2 ISO 27001:2013 Framework3.3.2.1 Using the ISO 27001/2 Framework as a Policy Framework3.3.2.2 Benefits of the ISO 27001/2 Security Controls Framework3.3.3 COBIT Framework3.3.3.1 Using the COBIT Framework as a Policy Framework3.3.3.2 Benefits of the COBIT Security Controls Framework3.3.4 HMG ISPF Framework3.3.4.1 Using the HMG ISPF as a Policy Framework3.3.4.2 Benefits of the HMG ISPF3.4 Tailoring Information SPFs3.4.1 Customer and Business Requirements3.4.2 Importance of Completeness3.4.3 Adding and Mapping Regulations3.5 Deriving a Policy Set from a FrameworkExercises
CHAPTER 4 INFORMATION SECURITY POLICY DETAILS
4.1 Front Matter4.2 Policy Statements4.2.1 Back Matter4.2.2 Policy Requirement Exceptions4.3 Specific Information Security Policies4.3.1 Organizational-Level Policies4.3.2 Security Program-Level Policies4.3.3 User Security Policies4.3.4 System and Control Policies4.4 Policy Document ExamplesExercises
CHAPTER 5 INFORMATION SECURITY PROCEDURES AND STANDARDS
5.1 Less Formal Language and Structure5.2 Various Purposes of the Standard and Guideline5.3 Information Security ProceduresExercises
CHAPTER 6 INFORMATION SECURITY POLICY PROJECTS
6.1 Scoping the Project6.2 Information Security Policy Project Roles6.3 Information Security Policy Project Phases6.4 Information Security Policy Revision Project6.5 Information Security Policy Project ApplicationExercises
APPENDIX A: EXAMPLE POLICIES (FISMA FRAMEWORK)
APPENDIX B: EXAMPLE DEPARTMENTAL POLICY TAILORING GUIDE
INDEX

Content preview from Information Security Policies, Procedures, and Standards

INFORMATION SECURITY POLICY PROJECTS

Embarking on a project to revise or rearchitect an information security policy set for an organization is a large and complex enough project to warrant project planning. Determining the steps required to complete the project, setting a budget, and obtaining expertise and oversight are all important steps toward ensuring a successful completion of an information security policy project. This chapter outlines the basic elements of an information security policy project.

6.1 Scoping the Project

As with any project, an important early element of the project plan is to scope the project effort and extent. An information security policy project has the scoping aspects as listed in Table 6.1.

Of course, information ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.

Julian F.

Head of Cybersecurity

I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.

Addison B.

Field Engineer

I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.

Amir M.

Data Platform Tech Lead

I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.

Mark W.

Embedded Software Engineer

Security Program and Policies: Principles and Practices, Second Edition

Publisher Resources

ISBN: 9781482245912

Cloud Computing

Data Engineering

Data Science

AI & ML

Programming Languages

Software Architecture

IT/Ops

Security

Design

Business

Soft Skills

Information Security Policies, Procedures, and Standards

by Douglas J. Landoll

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.