RE: OT: Information Security policy

["Keith.Morgan" <Keith.Morgan () Terradon com>]

I think the BS7799 is a good starting point for a security policy.  I read
through it, and found that just about every point in it was covered by the
policy I had already authored for our organization.  In other cases, issues
were omitted in the standard, but present in our policy.

My take on BS7799:  It's a great starting point.  Take it, mull over it for
a while, then tailor it for your organization.


-----Original Message-----
From: Scott, Richard [mailto:Richard.Scott () BestBuy com]
Sent: Thursday, February 15, 2001 12:17 PM
To: Firewall Wizards
Subject: [fw-wiz] OT: Information Security policy


I am looking for information about implementing and considering Information
Security policies.  

How many people actually consider the BS7799 Standard?

Are there any other standards that people recommend?

Do developers and designers or security enforce "roles and access" upon data
itself, to ensure that users of the information follow the policy that is
set within the company. 


Richard
The views expressed in this email do not represent Best Buy
or any of its subsidiaries.


_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards