The document library at first.org is an excellent resource for anyone developing data security policies and standards.
There you can find papers and presentations, a best practices guide library and a security reference index.
Best practices guides include:
- Acceptable Use Policy Template
- CERT-in-a-box
- Checking Microsoft Windows Systems for Signs of Compromise
- Checking UNIX/LINUX Systems for Signs of Compromise
- CSIRT Case Classification (Example for enterprise CSIRT)
- CSIRT Setting up Guide
- CVSS based patch policy for enterprise (example)
- Guide to Tunneling Windows NT VNC traffic with SSH2
- IIS and NTS 4.0 Hardening Guide
- Online Forensics of Win32 System Guide
- Secure BGP Template
- Secure BIND Template
- Secure IOS Configuration Template
- SSH Public Key Configuration Windows NT/2000/XP Guide
- Windows 2000 / IIS 5.0 DMZ Hardening Guide
- Windows 2003 / IIS 6.0 DMZ Hardening Guidelines
Definitely worth a look!
