Information Security Policy and Procedures Manual

Product Overview: In-depth, professionally developed Information Security Policy and Procedure Manual from Centris that includes coverage for all essential InfoSec and cybersecurity domains.

An essential document for helping implement sound security practices, along with also meeting growing regulatory compliance reporting mandates.

Centris offers a wide-range of world-class security and privacy documents for today's growing regulatory compliance mandates. 

Details & Specifications: The Information Security Policy and Procedures Manual includes the following sections and supporting documents:

• Access Control Policy and Procedures
• Anti-Virus and Anti-Malware Policy and Procedures
• Change Management & Change Control Policy and Procedures
• Clear Desk and Clear Screen Policy and Procedures
• Configuration Management Policy and Procedures
• Database Policy and Procedures
• Data and Information Classification Policy and Procedures
• Data Backup Policy and Procedures
• Data Retention and Disposal Policy and Procedures
• Encryption & Key Management Policy and Procedures
• Firewalls Policy and Procedures
• Incident Response and Recovery Policy and Procedures
• Internet Usage Policy and Procedures
• Media Protection Policy and Procedures
• Personally Identifiable Information (PII) Policy and Procedures
• Physical and Environmental Security Policy and Procedures
• Remote Access Policy and Procedures
• Removal Media Policy and Procedures
• Security and Patch Management Policy and Procedures
• Separation of Duties Policy and Procedures
• Software Usage Policy and Procedures
• Software Development Life Cycle (SDLC) Policy and Procedures
• System Maintenance Policy and Procedures
• Teleworking Policy and Procedures
• Vendor Management Policy and Procedures
• Vulnerability Management Policy and Procedures
• Wireless Security Policy and Procedures
• Workstation Security Policy and Procedures

Appendix A:

• Data Classification Matrices
• Key Management Program Template
• Incident Response Plan Form
• Remote Access Request Form
• Vendor Management Checklist I
• Vendor Management Checklist II
• Vendor Management Checklist III
• Vulnerability Management Worksheet – User Access Rights
• Vulnerability Management Worksheet – Configuration Standards
• Vulnerability Management Worksheet – Network Architecture and Topology
• Vulnerability Management Worksheet – Network Vulnerabilities
• Wireless Security Checklist
• Authorization Form for User Access – New Employees
• Authorization Form for User Access – Vendors
• Authorization Form for User Access – Guests
• User Deprovisioning/Off-boarding Form – All Users (Employee, Guest, Vendor, Other) 

Compliance Mapping: Can be utilized for NIST 800-53, ISO/IEC 27001/2, and all other major information security, cybersecurity, and data privacy laws, regulations, and frameworks. Contact Centris today to learn more.

Document Format: Microsoft Word

Length:325 pages.