Policies And Standards Blog

June 2007 - Posts

• New Project Leader for Policies and Standards Focus Area

  Ciske van Oosten has agreed to take over the Policies and Standards project at the ISM Community. Ciske runs a great blog focused on policies and standards at http://infosec-risk.blogspot.com/. The idea behind the Policies and Standards project is to build and maintain a comprehensive and well written free set of policies and standards. These things are rarely competitive advantages to any company and so collaboration can benefit everyone. There are some documents now floating around as donations from various companies which is also great. Ciske has written a great guide to policies and standards and has some great ideas and passion to make this project happen. The discussion forum is here http://www.ism-community.org/forums/68.aspx and I am sure Ciske will be sending some updates and have a project plan via the ISM blog for the project here http://www.ism-community.org/focusareas/21/PoliciesAndStandardsBlog/focusarea.aspx If you have any policies and standards you would donated as baseline documents please contact Ciske via the forums. Cheers, Mark Posted Jun 08 2007, 02:41 PM by mcurphey with no comments Filed under: ProjectNews

• ISM Community Top Ten - Draft

  I have just uploaded the ISM Community Top Ten Draft here. The intention of the T10 is to provide a short and concise awareness document. In the same genre as the SANS Top 20 and OWASP Top Ten it can be used by business managers as well as information security professionals to provoke thought about their current information security programs. We plan to release the final document next week. There have been several volunteers who have kindly offered to translate it into other languages. The current draft requires some final touches and if anyone has some time today or tomorrow please download it, edit it with tracking turned on (important) and email it to me (mark at curphey dot com). What is required is; 1. Proof reading (grammar, accuracy and completeness) 2. Tips and Tricks from the field added to sections 8, 9 and 10 Any major changes we can consider for an updated version later this year. Cheers. Posted Jun 04 2007, 04:43 PM by mcurphey with no comments Filed under: ProjectNews