IT Infrastructure, Strategy, and Charter Template
With the explosion of technology into every facet of the day-to-day business environment there is a need to define an effective infrastructure to support operating environment; have a strategy for the deployment and technology; and clearly define responsibilities and accountabilities for the use and application of technology.
The template comes as both a WORD document utilizing a CSS style sheet that is easily modifiable.
More...
Internet and IT Job Descriptions
The job descriptions contained within the Internet and Information Technology Position Descriptions HandiGuide® was completed in 2009 and contains over 635 pages; which includes sample organization charts, a job progression matrix, over 220 job descriptions. The book also addresses Fair Labor Standards and the ADA, and is in a new easier to read format. Each job description meets ADA standards and the position description is delivered in electronic format - word which is editable and PDF which is printed. Also included are tools to help you expand, evaluate and define your enterprise's unique additional required.
More...
Security Manual Template
ISO 27000 - Sarbanes Oxley Patriot Act -
HIPAA - PCI DSS Complaint
This Security Manual for the Internet and Information Technology is over 220 pages in length. All versions of the Security Manual template include both the Business & IT Impact Questionnaire and the Threat & Vulnerability Assessment Tool (both were redesigned to address Sarbanes Oxley compliance). In addition, the Security Manual Template PREMIUM Edition contains 16 detail job descriptions that apply specifically to security and Sarbanes Oxley, ISO 27000, PCI DSS, and HIPAA.
The Security Manual template can be purchased with the Disaster Recovery program or by itself in three: Standard, Premium, and Gold.
Areas covered by the Security Template include:
- Account privileges
- Antivirus
- Asset disposal
- Backup end user
- Backup server
- Blackberry usage
- Blog
- Business Continuity
- Cellular phone
- Change control
- Change management
- Copyright
- Disaster Recovery
- Document retention
- Downtime
|
- Email acceptable use
- Email archiving
- Email communications
- Equipment loan
- Firewall
- GPS cell phone
- Hardware sanitization
- Helpdesk triage
- Instant messenger
- Internet usage
- Move-add-change
- Outsourcing
- Password
- Patch management
- PDA usage
|
- Personal network
- Printer
- Purchasing
- Remote Access
- Server space usage
- Software acceptance
- Software development
- Software install
- Support Technology
- Standards
- Telecommuting
- Third party access
- Travel
- Voicemail
- Web posting
|
Clients can also subscribe to Janco's Security Manual update service and receive all updates to the Security Manual Template.
The template includes everything needed to customize the Internet and Information Technology Security Manual to fit your specific requirement. The electronic document includes proven written text and examples for the following major topics / sections for your security plan:
- Compliance to ISO 27000, Sarbanes-Oxley, PCI-DSS, Patriot Act and HIPAA
- Security Manual Introduction - scope, objectives, general policy, and responsibilities
- Risk Analysis - objectives, roles, responsibilities, program requirements, and practices program elements
- Staff Member Roles - policies, responsibilities and practices
-
Sensitive Information Policy
-
Physical Security - area classifications, access controls, and access authority
-
Facility Design, Construction and Operational Considerations - requirements for both central and remote access points
-
Media and Documentation - requirements and responsibilities
-
Data and Software Security - definitions, classification, rights, access control, INTERNET, INTRANET, logging, audit trails, compliance, and violation reporting and follow-up
-
Network Security - vulnerabilities, exploitation techniques, resource protection, responsibilities, encryption, and contingency planning
-
Internet and Information Technology contingency Planning - responsibilities and documentation requirements
-
Travel and Off-Site Meetings - specifics of what to do and not do to maximize security
-
Insurance - objectives, responsibilities and requirements
-
Outsourced Services - responsibilities for both the enterprise and the service providers
-
Waiver Procedures - process to waive security guidelines and policies,
-
Incident Reporting Procedures - process to follow when security violations occur
-
Access Control Guidelines - responsibilities and how to issue and manage badges / passwords
-
Sample Forms
-
Business and IT Impact Questionnaire
-
Threat & Vulnerability Assessment Tool
-
Security Violation Reporting form
-
Security Audit form
-
Inspection Check List
-
New Employee Security form
-
Security Access Application form
-
Employee Termination Checklist
-
Supervisor's Employee Termination Checklist
-
Sensitive Information Policy Compliance Agreement
-
HIPAA Audit Program Guide
-
ISO 27000 (ISO 27002 & ISO 27002) Security Checklist
-
PCI DSS Audit Program
CIO - CTO - CSO Security News
~~~BeginItemsRecord~~~ ~~~SortByPubDate~~~
~~~ItemTitle~~~
~~~ItemDescription~~~ - more info
~~~EndItemsRecord~~~
