RE: Security Policy Example

["Stiennon,Richard" <richard.stiennon () gartner com>]

Another good starting place is the NIST Internet Security Policy Technical
Guide at 

http://csrc.nist.gov/isptg/

As well as the IETF Site Security Handbook at

http://info.broker.isi.edu/in-notes/rfc/files/rfc2196.txt


The price is right :-)

-Richard Stiennon

-----Original Message-----
From: Maddy [mailto:mwlalex () magix com sg]
Sent: Wednesday, January 10, 2001 10:45 AM
To: Bret Watson
Cc: Melissa Stockman; firewall-wizards () nfr net
Subject: Re: [fw-wiz] Security Policy Example


Just in case you are thinking of buying BS7799, do consider ISO-17799
which is supposedly an updated version of the original BS7799. I can't
confirmed as I am still waiting for the doc to be delivered. Anyway, you
can get it from www.iso.ch.

Rgds
Maddy

Bret Watson wrote:
> I think its more a case of wanting to make more money. Personally I
> wouldn't bother - its only the first policy that is hard to write, after
> that it becomes easier.
>
> Also no policy will fit your org without needing re-writing, though it is
> easier to edit someone else's work to fit..
>
> You probably would be better off having a look at BS7799 / AS4444 as these
> are standards for an Information Security Management system - ie. a set of
> policies and the framework to enforce them.
>
> You can also go to the BSI.de site and look at the baseline security
manual
> (perhaps it is better to do a search for it - BSI-de is largely in german.
>
> Good luck!
>
> Bret
>
> At 02:43 PM 6/11/00 +0200, you wrote:
>
> > I have been in the process of ordering the Charles Cresson Woods
> > program/book that was suggested in this newsgroup for helping to write a
> > security policy.  The price that most people where stating was around
> > $500 and indeed that's what it said on their web page about a month
> > ago.  However, when I went to order it recently, I was shocked to see
> > that the price is now $795.  The original price of $495 is still
> > displayed on the page http://www.baselinesoft.com/ as of today, but when
> > you click to order you see the 'new' price.  I wonder if this is a
> > consequence of it's popularity.
> >
> > mel
> > --
> > Melissa Stockman                       Tel: 961 1 786 456
> > Director of IT                         Fax: 961 1 867 098
> > Lebanese American University           melissa.stockman () lau edu lb
> > www.lau.edu.lb
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () nfr com
> http://www.nfr.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards