Security Policy & Baseline Standards:
The SOS Information Security Policies

The SOS Information Security Policies have been produced from the extensive experience of respected Information Security Practitioners who have delivered business systems and security sensitive projects across the world. Based upon the foundation of the ISO 17799 security standard, they are both extensive and up to date, and may be modified and adopted by your organization to form the basis of an information security aware culture.
 

The SOS Information Security Policies
Whilst security policies lay a solid foundation for the development and implementation of secure practices within an organization, the policies themselves are all too often neither instructional nor descriptive. They simply represent the rules which must be followed.

Compliance with them, however, actually requires an understanding by staff of not only the individual policies but also of the circumstances in which such compliance is expected in their day-today activities. Knowing the Policies is only half of the equation - staff need to know how they should comply, from a procedural and practical perspective.

For this reason, the SOS Information Security Policies also include three additional key features :-

• Explanatory notes providing the background to each Policy
• Some of the key information security issues which should be considered when implementing the individual Policy
• The related ISO 17799 reference(s). The references within the policies ensure that easy cross referencing with this important standard is possible.

Obtaining The SOS Information Security Policies
This outstanding set of policies can now be obtained online, at a special cost of only $595 for unlimited use within your organization. The hundreds of policies are arranged in discrete chapters, each covering a related set of topics.... Controlling Access To Information And Systems; Controlling E-Commerce Information Security; Purchasing And Maintaining Commercial Software; Planning For Business Continuity, and of course many many more.

The sub-chapters within these chapters hold the policies themselves - each described clearly and with the important supporting elements described above.

The SOS Information Security Policies are provided in both MSword and PDF formats. They are therefore fully 'customisable' and can be changed or added to with ease.