Contents

Part-I Information Security Policies and Procedures 1. Introduction 2. Why Manage this Process as a Project? 3. Planning and Preparation 4. Developing Policies 5. Asset Classification Policy 6. Developing Standards 7. Developing Procedures 8. Creating a Table of Contents 9. Understanding How to Sell Policies, Standards, and Procedures Part II - Information Security Reference Guide 10. Introduction to Information Security 11. Fundamentals of Information Security 12. Employee Responsibilities 13. Information Classification 14. Information Handling 15. Tools of Information Security 16. Information Processing 17. Information Security Program Administration 18. Baseline Organization Information Security Program