Building a Security Policy Framework for a Large, Multi-national Company

Information Security is not just technology. It is a process, a policy, and a culture. Our organization had spent millions of dollars on technology to keep the 'bad guys' out but we had spent little time building the foundations of our Information Security Program. We did not have relevant current...

By Leslie VanCura

May 5, 2005

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Security Awareness

How to Use Phishing Benchmarks Effectively to Assess Your Program - Part 3

In part three of this mini-series on phishing benchmarks, we'll focus on internal benchmarking through comparison analysis.

SSA_Blog_Thumbnails_&_Social_Posts_May_22_PasswordDay_thumbnail.jpg

Security Awareness, Security Management, Legal, and Audit

World Password Day – Readying Your Workforce for MFA

Today is the perfect opportunity to talk about strong passwords.

Security Awareness

How to Use Phishing Benchmarks Effectively to Assess Your Program - Part 2

In part two of this mini-series on benchmarks for assessing your phishing program, we cover tiering and introduce the SANS Tiering Model.