Security Manual Template
 

ISO 27000  - HIPAA
PCI DSS - SOX
Compliant

Download once order is processed 

    The Security Management Template PREMIUM Edition
    includes 15 full job descriptions in WORD and PDF formats.
    They are:

     1. Chief Security Officer (CSO)
     2. VP Strategy and Architecture
     3. Director e-Commerce
     4. Database Administrator
     5. Data Security Administrator
     6. Manager Data Security
     7. Manager Facilities and Equipment
     8. Manager Network and Computing Services
     9. Manager Network Services
    10. Manager Training and Documentation
    11. Manager Voice and Data Communication
    12. Manager Wireless Systems
    13. Network Security Analyst
    14. System Administrator - Unix
    15. System Administrator - Windows

This Security Manual for the Internet and Information Technology is over 200  pages in length and is ISO 27000 Compliant. All versions of the Security Manual template include both the Business & IT Impact Questionnaire and the Threat & Vulnerability Assessment Tool (both were redesigned to address Sarbanes Oxley compliance).   In addition, the Security Manual Template PREMIUM Edition  contains 16 detail job descriptions that apply specifically to security and Sarbanes Oxley.

Clients can also subscribe to the Security Manual update service and receive all updates to the Security Manual Template.

The template includes everything needed to customize the Internet and Information Technology Security Manual to fit your specific requirement.  The electronic document includes proven written text and examples for the following major topics and sections for your security plan:
 

• Security Manual Introduction - scope, objectives, general policy, and responsibilities

• ISO 27000 Compliant

• Risk Analysis - objectives, roles, responsibilities, program requirements, and practices program elements

• Staff Member Roles - policies, responsibilities and practices

• Physical Security  - area classifications, access controls, and access authority

• Facility Design, Construction and Operational Considerations - requirements for both central and remote access points

• Media and Documentation - requirements and responsibilities

• Data and Software Security - definitions, classification, rights, access control, INTERNET, INTRANET, logging, audit trails, compliance, and violation reporting and follow-up

• Network Security - vulnerabilities, exploitation techniques, resource protection, responsibilities, encryption, and contingency planning

• Internet and Information Technology contingency Planning - responsibilities and documentation requirements

• Travel and Off-Site Meetings - specifics of what to do and not do to maximize security

• Insurance - objectives, responsibilities and requirements

• Outsourced Services - responsibilities for both the enterprise and the service providers

• Waiver Procedures - process to waive security guidelines and policies,

• Incident Reporting Procedures - process to follow when security violations occur

• Access Control Guidelines - responsibilities and how to issue and manage badges / passwords

• Sample Forms

  • Business and IT Impact Questionnaire

  • Threat & Vulnerability Assessment Tool

  • Security Violation Reporting form

  • Security Audit form

  • Inspection Check List

  • New Employee Security form

  • Security Access Application form

  • HIPAA Audit Program Guide

  • ISO 27000 Security Checklist

  • PCI DSS Audit Program

© 1999 - 2008 Janco Associates, Inc. - ALL RIGHTS RESERVED  -- Revised: 06/06/08.