Information Security Program: Sample Policies

Answered by:

Question:

Are there any sources or sample policies and procedures for the written Information Security Program required (or strongly suggested the examiners have already asked about it!) with the GLBA provisions.

Answer:

Check out the links on our BOL InfoSec Clearinghouse page. Scroll down on the InfoSec Clearinghouse page to reach the links. On the NIST site, for example, "Guide for Developing Security Plans for Information Technology Systems" you'll find sample clauses you can customize for your own needs.

First published on BankersOnline.com 8/6/01