The Corporate Information Security Policy (Writing Information Security Policies Book 1)

Every organization needs to protect their information assets from the increasingly sophisticated threats out to steal them. The agreed set of potection measures are documented in policies. This series begins with the overarching document, the corporate information security policy and will continue with functional policies that address discrete subjects. A template document and a set of suggested text are provided. The text makes use of best practices and recommended controls provided by ISO 27001 and SP 800-53. The appoach is to enable the rapid poduction of a draft policy that can be used to begin the process of stakeholder consensus building needed to result in a set of equirements that will adequately and appropriately protect critical and valuable assets.