Business Continuity/Disaster Recovery Bookstore Bestsellers

Emergency Management Exercises: From Response to Recovery Special
Exercises are a mainstay in the field of emergency management and business continuity planning. Although many companies conduct exercises, and the organizers may be emergency response subject matter experts, they do not excel in the discipline of designing and conducting the actual exercise – which means they simply don’t get the best results out of their effort. More...

NEW BOOK: Hiles on Business Continuity: Global Best Practices (Third Edition) by Thought Leader Andrew Hiles.
Confidently create your BCP from scratch – or improve the one you have – aided by Hiles’ wide-ranging perspective, including case studies, global standards, and hard-won insights into what works and why. More...

Facility Emergency Management DVD-based training
Facility Emergency Management is a brand new DVD-based Training Program PLUS a resource CD-ROM intended to help small and medium size organizations create facility action plans and institute emergency procedures in order to protect workers, customers, visitors and the nearby community from the effects of an incident, whether it begins inside or outside the facility. More...

NEW BOOK! The Cost of Emotions in the Workplace: Bottom Line Value of Emotional Continuity Management
Dr. Vali Hawkins Mitchell, a leading authority in the growing field of Emotional Continuity Management, makes a compelling business case that human emotions have a calculable, direct impact on the fiscal bottom line, and gives you powerful, practical tools to manage those costs. More...

NEW! Easy-to-Use Template for Comprehensive Business Continuity Management to Enhance Your Organization's Resilience
Easy-to-use, comprehensive, expert, step-by-step instructions and templates – just what you’re looking for if you need a clear, actionable Business Continuity Plan More...

NEW BOOK! Lukaszewski on Crisis Communication: What Your CEO Needs to Know about Reputation Risks and Crisis Management, by Jim Lukaszewski
A Global Grand Master and Pioneer – Who Helped Shape the Modern Discipline of Crisis Communication – Has Distilled a Career’s Worth of Knowledge and Practical Advice… to tell your CEO and advisers what they must do to preserve, protect, defend, and recover their brands, reputations, even careers. More...

Sample InfoSec Policy – Computer And Communications Facility Location

Written by Phil on November 11, 2010 in InfoSecurity, Standards.

This is a sample policy from Information Security Policies Made Easy, by Charles Cresson Wood.

Continue reading Sample InfoSec Policy – Computer And Communications Facility Location

Tags: charles cresson wood, information security policies, information security policies made easy, InfoSecurity, ISPME

Featured InfoSecurity Policy – Telecommuter Working Environments

Written by Phil on March 11, 2010 in Books, InfoSecurity.

Reducing risk associated with a new technology often requires a combination of overlapping management and technical policies. For example, simply publishing a policy that restricts peer-to-peer networking software may not be sufficient to protect against data leakage if the organization has not defined any controls around computing environments for remote workers. Since many data leaks occur through home-based networks, protection involves a blend of policies including desktop configuration control, acceptable use and physical and environmental controls. As an example, consider this sample policy for Internet Telecommuter Working Environments.

Continue reading Featured InfoSecurity Policy – Telecommuter Working Environments

Tags: charles cresson wood, information security policies, information security policies made easy, InfoSecurity, ISPME, policies, Telecommuter

Featured Policy – Security in Outsourced Network Services

Written by Phil on December 1, 2009 in Books, InfoSecurity.

An increased focus for both state and Federal information security laws is the monitoring of third-party vendors. Vendor security is becoming more critical with the trend toward outsourced networking services via cloud computing. One way to make sure that vendor security is not overlooked is to include these requirements as part of all third party service provider contracts. To formalize this requirement, consider this sample policy: Security Requirements in Outsourced Network Services.

Continue reading Featured Policy – Security in Outsourced Network Services

Tags: charles cresson wood, information security policies, information security policies made easy, InfoSecurity, ISPME, policies

Gaps in Corporate Security Policies and Data Leakage

Written by Paul Kirvan on November 18, 2008 in InfoSecurity, survey.

Cisco has released a second set of findings from a global study on data leakage, revealing the prevalence and effectiveness of corporate security policies within companies and the reasons employees break or comply with them. The study enables information technology teams in various parts of the world to understand employee risk factors so they can effectively tailor policies that fit the reality of what their users need to do their jobs.

Continue reading Gaps in Corporate Security Policies and Data Leakage

Tags: data security, information security, information security policies, information security policies made easy, InfoSecurity

Rothstein Associates Inc. Business Survival ™ Weblog

Pages

Categories

Archives

Profile

Business Continuity/Disaster Recovery Bookstore Bestsellers

Business Survival ™ News

Global Disaster Alert

Affiliates

Archives

Sample InfoSec Policy – Computer And Communications Facility Location

Featured InfoSecurity Policy – Telecommuter Working Environments

Featured Policy – Security in Outsourced Network Services

Gaps in Corporate Security Policies and Data Leakage