Defines standards for minimal security configuration for servers inside the organization's production network, or used in a production capacity.

Sample policy defining the minimum requirement for all equipment located outside the corporate firewall.

Sample policy defining the assignment of sensitivity levels to information.

Sample policy establishing security requirements of equipment to be deployed in the corporate De-Militarized Zone. [MS Word]

Policy regarding the use of dial-in connections to corporate networks. [MS Word]

Sample policy establishing the minimum security requirements for all routers and switches connecting to production networks. [MS Word]

Offer computer security research, training and information.

Documents dealing with Windows 2000 security issues from the SANS Information Security Reading Room.