Defines acceptable use of IT equipment and computing services, and the appropriate employee security measures to protect the organization's corporate resources and proprietary information. [MS Word]

Defines responsibilities regarding corporate acquisitions and the minimum requirements of an acquisition assessment to be completed by the information security group. [MS Word]

Article discusses the elements of a corporate security policy, which it calls the gateway to a company`s intellectual property. The main threat to information security within a company is its employees.

Defines policy for analog/ISDN lines used for FAXing and data connections.

Requirements for effective virus detection and prevention. Written for a laboratory environment but easy to adapt for other settings. [MS Word]

Security criteria for an ASP.

Defines requirements and provides authority for the information security team to conduct IT audits and risk assessments.

Defines requirements for securely storing and retrieving database usernames and passwords. [MS Word]

Policy regarding the use of dial-in connections to corporate networks. [MS Word]

Sample policy establishing security requirements of equipment to be deployed in the corporate De-Militarized Zone. [MS Word]