Information, background, resources covering the ISO 27001 security standard

The SANS Institute, offering computer security training for system administrators, computer security professionals, and network administrators, is a cooperative research and education organization that has many consensus projects to return computer security information to the community.

Requirements for effective virus detection and prevention. Written for a laboratory environment but easy to adapt for other settings. [MS Word]

Sample privacy policy including Privacy Act systems of records notices, Privacy Act statements and a privacy impact assessment, designed to satisfy the requirements of HSPD-12 “Policy for a Common Identification Standard for Federal Employees and Contractors”

Defines responsibilities regarding corporate acquisitions and the minimum requirements of an acquisition assessment to be completed by the information security group. [MS Word]

Sandstorm Enterprises: PhoneSweep for Telephone Scanning - War Dialing

Watchguard's guide to creating an overarching network information security policy, supported by subsidiary policies. [PDF]

The SANS Institute, offering computer security training for system administrators, computer security professionals, and network administrators, is a cooperative research and education organization that has many consensus projects to return computer security information to the community.

Electronic resource usage and security policies from the University of Pennsylvania.

Policies on information security and other topics from ePolicy Institute.