Key To Your Information Security Training - Policies and Standards

The often repeated "Information Security isn't a destination, but a continuous journey," rings true for financial institution's information security professionals. What is taken along on any journey? A map showing where you've been and where you plan to go is usually needed, unless you want to wander aimlessly. In the case of the information security journey, that map is the institution's information security policies and standards.

So what do your information security policies look like? Do they sit on a shelf or exist only as an electronic document to be trotted out when the examiners arrive?

• Writing Effective Information Security Policies
• Will SOX and GLBA Soon Require Strong Authentication?