Re: Procedures

["PCSC Information Services" <info () pcsage biz>]

Hi Jono,

Well, you've come to the right place. Policies and Procedures are a  
vast topic, and I'm certain that you'll find many list members have  
their own 'go to' places for policy and procedure advice and help.

A great place to start is SANS, they operate as both a clearing house  
of security procedures and methods and also provide certification in  
dealing with the same. They have an extensive website complete with  
many free resources when you're starting out. It can be found at :

http://www.sans.org/resources/

It might also be a good idea to check out standards that are set  
dependent upon your industry.
In the US NIST develops and defines standards for many industries.  
 From the CSRC homepage you'll find a number of helpful links to get  
you started.

http://csrc.nist.gov/index.html

While not an exhaustive list by any means, those two are pearls, and  
should give you plenty of material to get started, and start asking  
the right questions about how best to proceed for your organization.

Good luck,

Sean Swayze
PCSC Information Services


On 5-Jan-07, at 8:40 AM, security () calowaycrew com wrote:

> Hi
>
> I have policies covering just about everything so now I want to  
> start writing lower level documents to give people guidelines &  
> procedures.  Please could I have some pointers and/or links for the  
> format that anybody else has used.
>
> Thanks
>
> Jono
>
> ---------------------------------------------------------------------- 
> -----
> This list is sponsored by: ByteCrusher
>
> Detect Malicious Web Content and Exploits in Real-Time.
> Anti-Virus engines can't detect unknown or new threats.
> LinkScanner can. Web surfing just became a whole lot safer.
>
> http://www.explabs.com/staging/promotions/xern_lspro.asp? 
> loc=sfmaildetect
> ---------------------------------------------------------------------- 
> -----


---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------


This message and its attachments may contain legally privileged or
confidential information. It is intended solely for the named addressee. If
you are not the addressee indicated in this message (or responsible for
delivery of the message to the addressee), you may not copy or deliver this
message or its attachments to anyone. Rather, you should permanently delete
this message and its attachments and kindly notify the sender by reply
e-mail. Any content of this message and its attachments which does not
relate to the official business of the sending company must be taken not to
have been sent or endorsed by that company or any of its related entities.
No warranty is made that the e-mail or attachment(s) are free from computer
virus or other defect.


This message and its attachments may contain legally privileged or confidential information. It is intended solely for 
the named addressee. If you are not the addressee indicated in this message (or responsible for delivery of the message 
to the addressee), you may not copy or deliver this message or its attachments to anyone. Rather, you should 
permanently delete this message and its attachments and kindly notify the sender by reply e-mail. Any content of this 
message and its attachments which does not relate to the official business of the sending company must be taken not to 
have been sent or endorsed by that company or any of its related entities. No warranty is made that the e-mail or 
attachment(s) are free from computer virus or other defect.

---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------