General advice for those new to writing information security policies.

Defines encryption algorithms that are suitable for use within the organization. [MS Word]

Defines acceptable use of IT equipment and computing services, and the appropriate employee security measures to protect the organization's corporate resources and proprietary information. [MS Word]

Defines policy for analog/ISDN lines used for FAXing and data connections.

Requirements for effective virus detection and prevention. Written for a laboratory environment but easy to adapt for other settings. [MS Word]

Defines responsibilities regarding corporate acquisitions and the minimum requirements of an acquisition assessment to be completed by the information security group. [MS Word]

Policy to secure confidential information and technologies in the labs and protect production services and the rest of the organization from lab activities. [MS Word]

Sample policy to help employees determine which emails should be retained and for how long.

Sample policy intended to 'establish a culture of openness, trust and integrity'.

Defines the requirement that third party organizations requiring access to the organization's networks must sign a third-party connection agreement. [MS Word]