Information, background, resources covering the ISO 27001 security standard

Policies on information security and other topics from ePolicy Institute.

A menu of clauses suitable for email acceptable use policies.

Requirements for effective virus detection and prevention. Written for a laboratory environment but easy to adapt for other settings. [MS Word]

Electronic resource usage and security policies from the University of Pennsylvania.

Defines policy for analog/ISDN lines used for FAXing and data connections.

Watchguard's guide to creating an overarching network information security policy, supported by subsidiary policies. [PDF]

The SANS Institute, offering computer security training for system administrators, computer security professionals, and network administrators, is a cooperative research and education organization that has many consensus projects to return computer security information to the community.

Defines responsibilities regarding corporate acquisitions and the minimum requirements of an acquisition assessment to be completed by the information security group. [MS Word]

Sample policy to help employees determine which emails should be retained and for how long.