The short answer is read a lot. There is no shortcut and policies need to be customized for each institution.
In my opinion, the single most useful thing to help put together a set of policies is "Information Security Policies Made Easy," by Charles Woods, published by Pentasafe. This is set up like a form book and comes with the forms in the book as well as on CD so that you can cut and paste a set of policies together.
Additionally I have a set of links focused on Information Security Policy that you can use: http://www.securemis.com/links.html
Look over the 4th category on that page and I think you should find something to help you out.
First published on BankersOnline.com 11/04/02
Writing An IT Policy
Answered by:
Question:
I need to write an IT policy and procedures. How do I begin?
Answer: