New and Updated Sample Security Policy Documents
Information Security Policies Made Easy, Version 13 contains these updates:
Security Policy Library Update for the Common Policy Library (CPL) and ISO 27002:2013
The ISPME Version 13 security policy library has been updated to reflect the new Common Policy Library (CPL). The CPL is a set of common information security policies that enable organizations to comply with multiple data protection laws including ISO 27002, PCI-DSS and HIPAA/HiTECH. ISPME is the most complete library of security policies available covering over 200 different information security topics.
38 Updated “Ready-to-Go” Sample Security Policy Templates
Version 13 now contains 38 complete, pre-written sample information policy documents in MS-Word format, including:
- Sample High-Level Information Security Policy
- Sample IT Risk Management Security Policy
- Sample Information Security Program Policy
- Sample Information Security Organization Policy
- Sample Audit and Compliance Assessment Policy
- Sample Asset Management Policy
- Sample Acceptable Use of Assets Policy
- Sample Acceptable Use of Social Networking Policy
- Sample Cloud Computing Security Policy
- Sample Mobile Computing Security Policy
- Sample Remote Working (Telecommuting) Security Policy
- Sample Personally Owned Devices (BYOD) Security Policy
- Sample Information Classification Policy
- Sample Information Exchange Policy
- Sample Information Storage and Retention Policy
- Sample Information and Media Disposal Policy
- Sample Third Party Security Management Policy
- Sample Personnel Security Management Policy
- Sample Security Awareness and Training Policy
- Sample Access Control Security Policy
- Sample Account and Privilege Management Policy
- Sample Remote Access Security Policy
- Sample Network Security Management Policy
- Sample Firewall Security Policy
- Sample Wireless Network Security Policy
- Sample Physical Security Policy
- Sample System Configuration Management Policy
- Sample Change Management Policy
- Sample Malicious Software Management Policy
- Sample Encryption and Key Management Policy
- Sample Application Development Security Policy
- Sample Security Incident Response Policy
- Sample Data Breach Response Policy
- Sample Backup and Recovery Policy
- Sample IT Business Continuity Policy
- Sample Log Management and Monitoring Policy
- Customer Data Privacy Policy
- Sample Best Practices Information Security Policy Template
New Policy Compliance Tools
The updated Master Policy List allows easy gap-analysis for your existing policies. A newly-added Best Practices Policy Template enables your organization to easily reference existing policies to compliance frameworks such as HIPAA, COBIT or PCI-DSS.
- Information Security Policy Compliance Agreement
- Management Risk Acceptance Memo
- Two-Page Simple Non-Disclosure Agreement
- Sample Data Classification Quick Reference Table
- Sample Identity Token Responsibility Statement
- Sample Employment Termination Procedure
- Sample Security Incident Reporting Form
- Sample Information Security Policy Glossary
120+ New Information Security Policies
Version 13 contains 120 additional pre-written information security policy statements with expert commentary covering the latest security threats and technologies, including:
- Audit Logging
- BYOD (Bring Your Own Device)
- Cloud Computing
- Corporate governance
- Data Breaches Response
- Disposal of equipment
- Email security including phishing
- Instant messaging
- Information Security Coordination
- USB storage
- Mobile device security
- Personnel Security
- Physical Security
- Risk Management
- Social Networking
- Supply Chain Security
- Security Department coordination
- Remote Access and Teleworking
- FAX and office machine security
- Third-Party Software Development
- Third-Party Service Management
- Third-Party Information Disclosure
- And much more…
Easy Subscription Updates
Upgrade easily from V12 or V13 to the new PolicyShield Policy Subscription Service and keep your security policies updated against the latest threats.