Anti-Virus Policy Requirements for effective virus detection and prevention. Written for a laboratory environment but easy to adapt for other settings. [MS Word] http://www.sans.org/resources/policies/Lab_Anti-Virus_Policy.doc Sans.org~Site InfoWhoisTrace RouteRBL Check
Acquisition Assessment Policy Defines responsibilities regarding corporate acquisitions and the minimum requirements of an acquisition assessment to be completed by the information security group. [MS Word] http://www.sans.org/resources/policies/Aquisition_Assessment_Policy.doc Sans.org~Site InfoWhoisTrace RouteRBL Check
Laboratory Security Policy Policy to secure confidential information and technologies in the labs and protect production services and the rest of the organization from lab activities. [MS Word] http://www.sans.org/resources/policies/Internal_Lab_Security_Policy.doc Sans.org~Site InfoWhoisTrace RouteRBL Check
Ethics Policy Sample policy intended to 'establish a culture of openness, trust and integrity'. http://www.sans.org/resources/policies/Ethics_Policy.doc Sans.org~Site InfoWhoisTrace RouteRBL Check
Extranet Policy Defines the requirement that third party organizations requiring access to the organization's networks must sign a third-party connection agreement. [MS Word] http://www.sans.org/resources/policies/Extranet_Policy.doc Sans.org~Site InfoWhoisTrace RouteRBL Check
Information Security Policies 111-page security policy manual from the Australian New South Wales Department of Commerce, based on ISO/IEC 27001. http://www.gcio.nsw.gov.au/documents/Information%20Security%20Guideline%20V1.1.pdf Nsw.gov.au~Site InfoWhoisTrace RouteRBL Check