Re: about policy, standars ...

["Steve" <securityfocus () delahunty com>]

I was digging through some old email for those standards, so I agree with
Ganesh.

There are also some commercial security policy documents you can purchase
and modify.  Of course your policy drives your systems/practices implemented
not vice versa.
Check out http://www.e-janco.com/Security.htm for example.

----- Original Message ----- 
From: "Ganesharatnam C" <ganesh () silicon net my>
To: "Roberto C. Torres A." <kamissama () hotmail com>;
<security-basics () securityfocus com>
Sent: Wednesday, October 15, 2003 12:27 PM
Subject: RE: about policy, standars ...


Robert,

You are trying to come out with a security policy. ghheeshh... Try the
standards to work with, if I am not mistaken, ISO17799, BSI-bs7799 are good
security standard practice but they cover a wide range of factors.

A good start would be to look at CISSP, has a few domains, buy a book and
you can start developing areas to be covered and so fourth.

Thanks
Ganesh C

-----Original Message-----
From: Roberto C. Torres A. [mailto:kamissama () hotmail com]
Sent: Tuesday, October 14, 2003 10:02 AM
To: security-basics () securityfocus com
Subject: about policy, standars ...




Hi everyone!

I need to create a doc with policy, Standars and Guidelines related to
security, i´m new at this and i don´t know were to start, I recently bougth
the book  Security Architecture from RSA press, But i heard that there are
sites that have more practical ways to create what i need

Any help is apreciated, Thanks in advance

Robert

_________________________________________________________________
The new MSN 8: advanced junk mail protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail


---------------------------------------------------------------------------
----------------------------------------------------------------------------




----------------------------------------------------------------------------
----


---------------------------------------------------------------------------
----------------------------------------------------------------------------


---------------------------------------------------------------------------
FREE Whitepaper: Better Management for Network Security

Looking for a better way to manage your IP security?
Learn how Solsoft can help you:
- Ensure robust IP security through policy-based management
- Make firewall, VPN, and NAT rules interoperable across heterogeneous
networks
- Quickly respond to network events from a central console

Download our FREE whitepaper at:
http://www.securityfocus.com/sponsor/Solsoft_security-basics_031015
----------------------------------------------------------------------------