Security Manual
Template

ISO 27000 - 27001 & 27002 - (formerly ISO 17799), - GDPR, Sarbanes Oxley, HIPAA, PCI-DSS, and Patriot Act Compliant

Includes Audit Program for PCI DSS Compliance, HIPAA Audit Guide, and ISO 27000 Checklist

Order Security Manual Template Download Table of Contents

The Security Manual for the Internet and Information Technology is over 240 pages in length. This electronic document is fully compliant with the ISO 27000 standard, Sarbanes Oxley, HIPAA standard, and the Patriot Act.

All versions of the Security Manual template include both the Business & IT Impact Questionnaire and the Threat & Vulnerability Assessment Tool (both were redesigned to address Sarbanes Oxley compliance. In addition, the Security Manual Template PREMIUM Edition contains detail job descriptions that apply specifically to security and Sarbanes Oxley. The job descriptions are:

Chief Security Officer (CSO)
Chief Compliance Officer (CCO)
Chief Digital Officer
Chief Mobility Officer
VP Strategy - Architecture
Data Protection Officer (DPO)
Director e-Commerce
Database Administrator
Data Security Administrator
Manager Compliance
Manager Data Security
Manager Facilities and Equipment
Manager Network - Computing Services

Manager Network Services
Manager Security and Workstations
Manager Training - Documentation
Manager Voice and Data Communication
Manager Wireless Systems
Identity Management Protection Analyst
Information Security Analyst
Network Security Analyst
System Administrator - Linux
System Administrator - Unix
System Administrator - Windows
Wi-Fi Administrator

Clients can also subscribe to Janco's Security Manual update service and receive all updates to the Security Manual Template.

The template includes everything needed to customize the Internet and Information Technology Security Manual to fit your specific requirement. The electronic document includes proven written text and examples for the following major topics for your security plan:

Compliance to ISO 27000 (27001 & 27002), HIPAA, SOX, PCI, and the Patriot Act
Security Manual Introduction - scope, objectives, general policy, and responsibilities
Risk Analysis - objectives, roles, responsibilities, program requirements, and practices program elements
Staff Member Roles - policies, responsibilities and practices
Physical Security - area classifications, access controls, and access authority
Facility Design, Construction and Operational Considerations - requirements for both central and remote access points
Media and Documentation - requirements and responsibilities
Data and Software Security - definitions, classification, rights, access control, INTERNET, INTRANET, logging, audit trails, compliance, and violation reporting and follow-up
Network Security - vulnerabilities, exploitation techniques, resource protection, responsibilities, encryption, and contingency planning
Internet and Information Technology contingency Planning - responsibilities and documentation requirements
Travel and Off - Site Meetings - specifics of what to do and not do to maximize security
Insurance - objectives, responsibilities and requirements
Outsourced Services - responsibilities for both the enterprise and the service providers
Waiver Procedures - process to waive security guidelines and policies,
Incident Reporting Procedures - process to follow when security violations occur
Access Control Guidelines - responsibilities and how to issue and manage badges / passwords
Sample Forms

Business and IT Impact Questionnaire
Threat & Vulnerability Assessment Tool
Security Violation Reporting form
Security Audit form
Inspection Check List
New Employee Security form
Security Access Application form

Order Security Manual Template Download Table of Contents