Find Resources & Connect with members on topics that interest you.

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

Please sign in to see your topics.

You must be logged in to join this group.

Information Security Policies/Procedures

Welcome to the Information Security Policies/Procedures topic!

Collaborate, contribute, consume and create knowledge around various information security policies and procedures including BYOD, password complexity, and other topics.

ISACA members can participate by clicking on the “Join this Community” button. You must be signed into the site. Set your alerts to be notified of new discussion activity within this community. Not an ISACA member? Join now!

 
This Topic Has:
1208 Members
2 Online
11885 Visits

Community Leader

Knowledge Center Manager

Knowledge Center Manager

Title: Become a Topic Leader!

Badge: Energizer

 

NEW! Activity Badges

Badges help others understand your level of community activity and your reputation as a contributor within the Knowledge Center. Learn More.

Discussions: 58 total

Must be a Topic member to contribute
View All »
What are your recommendations for books that cover IT Policy Management?
Adora370 | 6/27/2017 8:05:59 AM | COMMENTS(0)
All, I am looking for application security policy templates or examples that I can use to help develop one for my organization. I saw that SANS has a web application security template at: https://www.sans.org/security-resources/policies/application-securi...
Peter569 | 5/1/2017 9:22:48 AM | COMMENTS(0)
It's a tricky one, and from my previous post in this community you may guess has been a fascination of mine for coming on 2 decades now.   Writing policies is fine, there are many resources to help - and once you have a good set of them most auditors wil...
Daniel477 | 2/22/2017 1:42:18 AM | COMMENTS(5)
I would like to know which argument we could give for NOT having formal policies in the context of small and medium entreprises. I would like to come with other arguments than the lack of resources, or skills, which are weak arguments, in my opinion. As a...
frelem | 2/3/2017 3:57:18 PM | COMMENTS(5)
Hi  Is there any organisation or resource (such as NIST, etc) which publishes best practice security policy documents which can be used as a starting point for companies looking to review their security policies?  Thanks in advance
Sharad407 | 2/2/2017 8:27:18 AM | COMMENTS(4)
Can anyone recommend industry recognized certifications for writing IT Security Policies? I'm looking for something that will improve my skillset while highlighting my existing skills and experience. Thanks! Adora
Adora370 | 12/20/2016 8:14:35 AM | COMMENTS(7)

Documents & Publications: 37 total

Must be a Topic member to contribute
View All »
Posted by ISACA 821 days ago
Books
Posted by ISACA 962 days ago
Downloads
Posted by ISACA 1124 days ago
Downloads
Posted by ISACA 1124 days ago
Downloads
Posted by ISACA 1124 days ago

Events & Online Learning: 9 total

16 Mar 2015
ISACA International Event
Orlando, FL, USA
15 Jun 2015
ISACA International Event
Ciudad de México, Mexico
21 Sep 2015
ISACA International Event
Miami, FL, USA
1 Aug 2016
ISACA International Event
Chicago, IL, USA
31 Jul 2017
ISACA International Event
Chicago, IL, USA

Journal Articles: 32 total

Volume 4, 2107
by Larry G. Wlosinski, CISA, CRISC, CISM, CAP, CBCP, CCSP, CDP, CIPM, CISSP, ITIL v3, PMP
The root causes of privacy incidents include the outsourcing of data, malicious insiders, system glitches, cyberattacks, and the failure to shred or dispose of privacy data properly.
Volume 3, 2107
by Jayakumar Sundaram, CISA, ISO 27001 LA
The SoA is a continuously updated and controlled document that provides an overview of information security implementation.
Volume 3, 2017
by Indrajit Atluri, CRISC, CISM, CEH, CISSP, CSSLP, HCISPP, ITILv3
The resolve to address IoT device security at various levels—hardware and software, government and enterprise, consumers and services—is widespread.
Volume 1, 2017
by David Eduardo Acosta R., CISA, CRISC, CISM, BS 25999 LA, CCNA Security, CEH, CHFI Trainer, CISSP Instructor, PCI QSA, OPST
Based on the information an organization manages, the security policy should set out the requirements and controls for the protection of the various assets according to their criticality
Volume 5, 2015
by Seymour Bosworth, Michel E. Kabay and Eric Whyne | Reviewed by Dino Ippoliti, CISA, CISM
Many students and young professionals want to know which topics they should master in the information security field.
Volume 4, 2015
by Laura Taylor | Reviewed by Ibe Etea, CISA, CRISC, CA, CFE, CIA, CRMA
FISMA Compliance Handbook is a valuable reference guide to compliance requirements in the US.

Wikis: 2 total

Blog Posts: 5 total

Must be a Topic member to view blog posts
Few days ago the person behind the Hacking Team hack revealed how he did it in pastebin - (the original in Spanish) https://pastebin.com/raw/GPSHF04A I was very keen to understand how good you need to be to hack back one of the most (in)famous hacki...
Posted By : TiagoRosado | 0 comments
Senior Manager           ultimate responsibility Information security Officer          functional responsibility Security Analyst           Strategic, develops policies and guidelines Owner         - Responsible for asset         - Determine level of clas...
Posted By : Muhammad554 | 0 comments
Infosec community celebrates new versions of ISO 27001:2013 and ISO 27002:2013. Worth to look at:http://blog.iso27001standard.com/2013/10/08/infographic-new-iso-27001-2013-revision-what-has-changed and everyone should read the story of genesis of  ISO 270...
Posted By : Vilius | 1 comments
13 Nov 2014
Posted By : masarker | 4 comments
On March 1st,  I was invited to speak at the CampIT conference on Enterprise Risk/Security Management at Rosemont Convention Center. Before me there were two speakers. The first presenter spent an hour presenting the story from the trenches of technolog...
Posted By : appolloconsulting | 2 comments