I found a great presentation called “Best Practices in Corporate Privacy & Information Security” by Donald Cohn at the infolaw.org site here.
Donald covers lots of security policies starting on slide 22.
These are the policies he lists under Information Classification & Protection:
- Information Classification & Protection
- Information Classification
- Information Retention
- Anti-Virus Software
- Application/Software Development
- Information Disposal
- Apply “Right to Know” Principle
- Back-ups
- Encryption
- Fax Transmissions
- Use of Copiers & Area Printers
- Company Developed Software Ownership
- Vulnerability Migration
- Equipment Inventory
Check it out!
{ 1 trackback }