Computer Security Policy Templates

Acceptable Encryption Policy

Defines requirements for encryption algorithms used within the organization.

• View Acceptable Encryption Policy (PDF)
• Download Acceptable Encryption Policy (Word Doc)

Acceptable Use Policy

Defines acceptable use of equipment and computing services, and the appropriate employee security measures to protect the organization's corporate resources and proprietary information.

• View Acceptable Use Policy (PDF)
• Download Acceptable Use Policy (Word Doc)

Application Service Provider Policy

Defines minimum security criteria that an ASP must execute in order to be considered for use on a project by the organization.

• View Application Service Provider Policy (PDF)
• Download Application Service Provider Policy (Word Doc)

Application Service Provider Standards

Outlines the minimum security standards for the ASP. This policy is referenced in the ASP Policy above.

• View Application Service Provider Standards (PDF)
• Download Application Service Provider Standards (Word Doc)

Computer Disaster Recovery Plan Policy

Robert Comella
View Computer Disaster Recovery Plan (PDF) (46KB)
SANS Technology Institute White Paper Project
July 2009

Computer Disaster Recovery Plan - Poster

Robert Comella
View Computer Disaster Recovery Plan (PDF) (3.22MB)
SANS Technology Institute White Paper Project
July 2009

Database Credentials Coding Policy

Defines requirements for securely storing and retrieving database usernames and passwords.

• View Database Credentials Coding Policy (PDF)
• Download Database Credentials Coding Policy (Word Doc)

End User Encryption Key Protection Policy

Rick D. Smith
View End User Encryption Key Protection Policy (PDF) (92KB)
SANS Technology Institute White Paper Project
August 2009

End User Encryption Key Protection - Poster

Rick D. Smith
View End User Encryption Key Protection Poster (PDF) (207KB)
SANS Technology Institute White Paper Project
August 2009

Password Protection Policy

Defines standards for creating, protecting, and changing strong passwords.

• View Password Protection Policy (PDF)
• Download Password Protection Policy (Word Doc)

Software Installation Policy

John Brozycki
View Software Installation Policy (PDF) (16KB)
SANS Technology Institute White Paper Project
November 2007

Software Installation Policy - Poster

John Brozycki
View Software Installation Policy Poster PDF (868KB)
SANS Technology Institute White Paper Project
November 2007

Workstation Security Policy

Russell Meyer
View Workstation Security Policy (Word Doc) (52KB)
SANS Technology Institute White Paper Project
February 2008

Workstation Security - Poster

Russell Meyer
View Workstation Security Poster (Word Doc) (1.1MB)
SANS Technology Institute White Paper Project
February 2008