Find Resources & Connect with members on topics that interest you.

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

Please sign in to see your topics.

You must be logged in to join this group.

Information Security Policies/Procedures

Welcome to the Information Security Policies/Procedures topic!

Collaborate, contribute, consume and create knowledge around various information security policies and procedures including BYOD, password complexity, and other topics.

ISACA members can participate by clicking on the “Join this Community” button. You must be signed into the site. Set your alerts to be notified of new discussion activity within this community. Not an ISACA member? Join now!

This Topic Has:
1101 Members
0 Online
10933 Visits

Community Leader

Knowledge Center Manager

Knowledge Center Manager

Title: Become a Topic Leader!

Badge: Energizer


NEW! Activity Badges

Badges help others understand your level of community activity and your reputation as a contributor within the Knowledge Center. Learn More.

Discussions: 53 total

Must be a Topic member to contribute
View All »
Hello everybody, I need to draft Acceptable Usage Policy for having employee use their personal mobile device for work. We are rolling out two-factor authentication, our preferred approach is employees use mobile device push notification or a soft token b...
Srinivas689 | 9/23/2016 8:45:40 AM | COMMENTS(0)
I would like to know which argument we could give for NOT having formal policies in the context of small and medium entreprises. I would like to come with other arguments than the lack of resources, or skills, which are weak arguments, in my opinion. As a...
frelem | 9/8/2016 5:03:32 AM | COMMENTS(0)
Hi  Is there any organisation or resource (such as NIST, etc) which publishes best practice security policy documents which can be used as a starting point for companies looking to review their security policies?  Thanks in advance
Sharad407 | 9/1/2016 4:12:46 AM | COMMENTS(3)
Hi everyone.  I wanted to know who should approve the final version of the IT policies and procedures? is it the CIO? Compliance? CEO or who exactly? Thanks for your help.
Bader-Addin511 | 9/1/2016 3:49:06 AM | COMMENTS(4)
Hello All, Recently i have joined a organisation and as part of my role and responsibility, I am currently reviewing and re-writing IT policy. I am looking for "Electronic mail and document archival policy" and any help / pointers on this will be much app...
Bharat Moghe | 6/9/2016 8:10:22 AM | COMMENTS(0)
Hi Everyone - I'm about to revamp our information security policy and would like to hear ideas from the group on formats / content / structure that has worked well for them. Have you recently created or amended IS policy, standards, or guidelines / pro...
Peter505 | 5/10/2016 8:59:14 AM | COMMENTS(6)

Documents & Publications: 50 total

Must be a Topic member to contribute
View All »
Posted by ISACA 346 days ago
Posted by ISACA 488 days ago
Posted by ISACA 629 days ago

Events & Online Learning: 7 total

2 Jun 2014
ISACA International Event
Atlanta, GA, USA
11 Aug 2014
ISACA International Event
Seattle, WA, USA
20 Oct 2014
ISACA International Event
Miami, FL, USA
15 Jun 2015
ISACA International Event
Ciudad de México, Mexico

Journal Articles: 28 total

Volume 5, 2015
by Seymour Bosworth, Michel E. Kabay and Eric Whyne | Reviewed by Dino Ippoliti, CISA, CISM
Many students and young professionals want to know which topics they should master in the information security field.
Volume 4, 2015
by Laura Taylor | Reviewed by Ibe Etea, CISA, CRISC, CA, CFE, CIA, CRMA
FISMA Compliance Handbook is a valuable reference guide to compliance requirements in the US.
Volume 2, 2015
One of biggest budget busters for an information security program is technology solutions that are not a good match for the organization.
Volume 2, 2015
by Mauricio Rocha Lyra, Ph.D., COBIT Foundation, CTFL, ISO 20000, ITIL, MCSO, OCUP, PMP, RUP and Jose Carlos Ferrer Simoes
The transformations experienced by organizations due to technological advances has made information, arguably, an enterprise’s most valuable asset.
Volume 6, 2014
by Jeimy J. Cano M., Ph.D, CFE
International trends reflect a paradigmatic change in current business models caused by the markets’ asymmetry and dynamics where instability is the constant and change is the norm.
Volume 5, 2014
by Ed Gelbstein, Ph.D.
There are three domains that impact information security.

Wikis: 2 total

Blog Posts: 3 total

Must be a Topic member to view blog posts
Infosec community celebrates new versions of ISO 27001:2013 and ISO 27002:2013. Worth to look at: and everyone should read the story of genesis of  ISO 270...
Posted By : Vilius | 1 comments
13 Nov 2014
Posted By : masarker | 4 comments
On March 1st,  I was invited to speak at the CampIT conference on Enterprise Risk/Security Management at Rosemont Convention Center. Before me there were two speakers. The first presenter spent an hour presenting the story from the trenches of technolog...
Posted By : appolloconsulting | 2 comments