The RUsecure Information Security Policies

 

Table of Contents

 

 

Using Your Information Security Policies *

 

Chapter 01 Securing Hardware, Peripherals
and Other Equipment *

Sub-Chapter 01 Purchasing and Installing Hardware *

Sub-Chapter 02 Cabling, UPS, Printers and Modems *

Sub-Chapter 03 Consumables *

Sub-Chapter 04 Working Off Premises or Using
Outsourced Processing *

Sub-Chapter 05 Using Secure Storage *

Sub-Chapter 06 Documenting Hardware *

Sub-Chapter 07 Other Hardware Issues *

 

Chapter 02 Controlling Access to Information
and Systems *

Sub-Chapter 01 Controlling Access to Information
and Systems *

 

Chapter 03 Processing Information and
Documents *

Sub-Chapter 01 Networks *

Sub-Chapter 02 System Operations and
Administration *

Sub-Chapter 03 E-mail and the Worldwide Web *

Sub-Chapter 04 Telephones & Fax *

Sub-Chapter 05 Data Management *

Sub-Chapter 06 Backup, Recovery and Archiving *

Sub-Chapter 07 Document Handling *

Sub-Chapter 08 Securing Data *

Sub-Chapter 09 Other Information Handling and Processing *

 

Chapter 04 Purchasing and Maintaining
commercial Software *

Sub-Chapter 01 Purchasing and Installing Software *

Sub-Chapter 02 Software Maintenance & Upgrade *

Sub-Chapter 03 Other Software Issues *

 

 

Chapter 05 Developing and Maintaining
In-House Software *

Sub-Chapter 01 Controlling Software Code *

Sub-Chapter 02 Software Development *

Sub-Chapter 03 Testing & Training *

Sub-Chapter 04 Documentation *

Sub-Chapter 05 Other Software Development *

 

Chapter 06 Combating Cyber Crime *

Sub-Chapter 01 Combating Cyber Crime *

 

Chapter 07 Complying with Legal and Policy Requirements *

Sub-Chapter 01 Complying with Legal Obligations *

Sub-Chapter 02 Complying with Policies *

Sub-Chapter 03 Avoiding Litigation *

Sub-Chapter 04 Other Legal Issues *

 

Chapter 08 Planning for Business Continuity *

Sub-Chapter 01 Business Continuity Management
(BCP) *

 

Chapter 09 Addressing Personnel Issues
relating to Security *

Sub-Chapter 01 Contractual Documentation *

Sub-Chapter 02 Confidential Personnel Data *

Sub-Chapter 03 Personnel Information Security Responsibilities *

Sub-Chapter 04 HR Management *

Sub-Chapter 05 Staff Leaving Employment *

Sub-Chapter 06 HR Issues Other *

 

Chapter 10 Controlling e-Commerce Information Security *

Sub-Chapter 01 E-Commerce Issues *

 

 

Chapter 11 Delivering Training and Staff
Awareness *

Sub-Chapter 01 Awareness *

Sub-Chapter 02 Training *

 

Chapter 12 Dealing with Premises related Considerations *

Sub-Chapter 01 Premises Security *

Sub-Chapter 02 Data Stores *

Sub-Chapter 03 Other Premises Issues *

 

Chapter 13 Detecting and Responding to IS
Incidents *

Sub-Chapter 01 Reporting Information Security
Incidents *

Sub-Chapter 02 Investigating Information Security Incidents *

Sub-Chapter 03 Corrective Activity *

Sub-Chapter 04 Other Information Security Incident
Issues *

 

Chapter 14 Classifying Information and Data *

Sub-Chapter 01 Setting Classification Standards *

 

Glossary and Reference Manual *