Re: Recommened readings for Developing Security Policy / Audit Proced ures

["Mitchell Rowton" <mitchell () attackprevention com>]

> I am looking for a recommended readings about how-to:
>
> - developing an I.T. security policy. It would be nice if it includes 
some
> case studies.
> - attack prevention procedures
> - attack response procedures
> - post-attack audit 
> - audit procedures to monitor whether security policies are in place 
>
> I truly appreciate it if anyone can help me out.

The first link is an overview of Policies and Procedure, and how they 
support each other.  The other link contains a few example policies.

Mitchell

http://www.attackprevention.com/ap/library/infosecprocess.htm

http://www.attackprevention.com/ap/policy.htm




_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards