Security Policies

Security policies are a means of protecting an organization's assets by defining certain minimum requirements or forbidding specified actions.

In terms of disaster recovery and continuity planning, establishing and following sound security policies can help to prevent or lessen a "system" disaster involving the temporary or permanent loss of your organization's data.

SANS (System Administration Audit Network Security Institute) has developed a variety of policy templates that may be used as a guide in creating security policies tailored to your organization. These policies cover topics such as:

• Acceptable Encryption
• Acceptable Use
• Anti-Virus Process
• E-mail
• Password Protection
• Remote Access
• Risk Assessment
• Wireless Communication

Visit the SANS web site for links to the policy templates.