Appendix B. SANS Policies
This appendix briefly introduces the SANS Institute, what it is and what it does. The appendix also explains the Security Policy Project and gives examples of security policies. Much of the material of this appendix is quoted directly from the SANS Institute website.
The SANS Institute was established in 1989 as a cooperative research and education organization. SysAdmin, Audit, Network, and Security (SANS) is by far the largest source for information on security training and certification in the world. It operates the Internet's early warning system, the Internet Storm Center—a free service to the Internet community. The Internet Storm Center gathers more than 3 million intrusion-detection log entries every ...