Link to home
Start Free TrialLog in
Avatar of quickslvr
quickslvrFlag for Switzerland

asked on

Security Policy for Enterprise

we are a large enterprise in the medical branch.

i have to deliver a Security Policy but never created one.
could somebody give me hints,ideas or even a template where i can start from?

thank you,
Avatar of Rich Rumble
Rich Rumble
Flag of United States of America image

Sans has the best place to start:http://www.sans.org/security-resources/policies/
-rich
ASKER CERTIFIED SOLUTION
Avatar of btan
btan

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Procedure and policies are very different yet seem similar.
Policies are not detail orientated, and procedures are very detailed. Policies are rules and goals for the company, and procedures are the processes and decision trees on how to achieve those goals.
The last link breadtan linked is a policy (I didn't read the first), and that's a very typical example. It took me a long time to get the difference, a procedure is how you carry out the policies enforcement and or goal.
-rich