RE: Client Security Policy, IT security Policy Samples

["Bob Wanamaker - Avant Systems, Inc." <rlw () avantsystems com>]

Greetings.

Repeat after me:

"We cannot develop any security policy without a risk assessment."

Any canned policies are only food for thought.

Best regards,

Bob

-----Original Message-----
From: firewall-wizards-admin () honor icsalabs com
[mailto:firewall-wizards-admin () honor icsalabs com]On Behalf Of Hilal
Hussein
Sent: Tuesday, June 03, 2003 2:47 AM
To: alexander.s () mccd edu; Wesley_Noonan () bmc com; avraham () jct ac il;
firewall-wizards () icsalabs com
Subject: [fw-wiz] Client Security Policy, IT security Policy Samples


Dear Gentlemen,

My Boss asked me to write down :
1 - the Password Policy
2 - The Client 'winXP,win98,winNT Wordstation' Security Policy
3 - The Information Technology Security Policy in General in our company

1-For the Password Policy, i got lots of documents from the net, and i came
out with two policies, one for "the creation of strong passwords, the
protection of those passwords, and the frequency of change" and the other is
for "how to write down passwords and seal them in an envelope, how to store
them and retrieve them appropriately".
Q1: do I have to keep it two policies or it is perferable to merge both in
one document?

2 - For the Client security policy
Q2: Is there any simple/clear and compelete document that is already
available for free on the net?

3 - For the IT security policy in General,
Q3: I got lots of documents, but till now, i am not able to see a complete
policy that will be a reference in my security dept, since we have firewall,
servers "domain, exchange, webmail, Oracle web application, ...
Is there any Document that is covering all of hte above mentioned IT
services, and more?

your comments and supports are really appreciated

with regards,

Hilal Hussein

_________________________________________________________________
The new MSN 8: smart spam protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards