Computer and Information Security Policy
- http://secinf.net/info/policy/hk_polic.html
- Formal IT security policy helps establish standards for IT resource protection by assigning program management responsibilities and providing basic rules, guidelines, and definitions for everyone in the organization. Policy thus helps prevent inconsistencies that can introduce risks, and policy serves as a basis for the enforcement of more detailed rules and procedures.
IT Security Cookbook
- http://www.boran.com/security/
- A guide to computer and network security with a strong focus on writing and implementing security policy. This is primarily for security managers and system administrators.