Information Security Policies, Procedures, and Standards

Contents

PREFACE

AUTHOR

CHAPTER 1    INTRODUCTION

1.1    No Short Cuts

1.2    Top-Down Security

1.3    Current State of Information Security Policy Sets

1.4    Effectiveness of Information Security Policy Sets

Exercises

CHAPTER 2    INFORMATION SECURITY POLICY BASICS

2.1    Information Security Policy Types

2.1.1    Information Security Policies

2.1.2    Information Security Standards

2.1.3    Information Security Guidelines

2.1.4    Information Security Baselines

2.1.5    Information Security Procedures

Exercises

CHAPTER 3    INFORMATION SECURITY POLICY FRAMEWORK

3.1    Information Security Policy Sets without Frameworks

3.2    Information Security Policy Sets with Frameworks

3.3    Common Information SPFs

3.3.1    FISMA Framework

3.3.1.1    Using ...