ISO 27002 Security Policy Templates

The ISO 27002 Security Policy templates from ecfirst provide an excellent opportunity for organizations to develop customized policies to address critical regulatory compliance mandates. The policy templates are available in Microsoft Word as a download from the ecfirst e-store.

Why is the ISO 27000 such an important standard in the world of information security? The ISO 27000 series provides best practice recommendations on information security management, risks and controls within the context of an overall Information Security Management System (ISMS). It is applicable to organizations of all types, across industries, and sizes.

The security policy templates address all the controls defined within categories and clauses of the ISO 27002 information security standard. The ISO 27002 provides best practice recommendations on information security management for use by those who are responsible for initiating, implementing or maintaining an ISMS.

Your organization may be impacted by regulations such as the Health Insurance Portability and Accountability Act (HIPAA) and possibly other regulations such as the Payment Card Industry's Data Security Standard (PCI's DSS) or U.S. State requirements. An important reference and an excellent framework in the world of information security are the ISO 27001 and ISO 27002 standards. Your organization can get a fast start to addressing regulatory requirements by first developing policies centered around this exclusive global information security standard.

Uday Ali Pabrai, CISSP (ISSAP, ISSMP), Security+, is the chief executive of ecfirst, an Inc. 500 business. A highly sought after information security and regulatory compliance expert, he has successfully delivered solutions on compliance and information security to hundreds of organizations worldwide. Mr. Pabrai has presented opening keynote and been a featured speaker at several conferences. Mr. Pabrai is a member of the U.S. FBI InfraGard.