https://speakerdeck.com/darrylmacleod 2018-08-31 20:58:12 -0400 Information security policies: Everyone hates writing them, everyone hates reading them, but they are a necessary evil for an effective information security program. The trouble is that very few organizations take the time and trouble to create decent policies; instead they are happy to download examples to cut and paste as they see fit. The resulting mess is often no good to anyone and can often leave the organization open to unforeseen issues, especially when an auditor comes calling. We will walk through the process of creating a simple, yet effective, information security policy... from an auditor's point of view. Information security policies: Everyone hates writing them, everyone hates reading them, but they are a necessary evil for an effective information security program. The trouble is that very few organizations take the time and trouble to create decent policies; instead they are happy to download examples to cut and paste as they see fit. The resulting mess is often no good to anyone and can often leave the organization open to unforeseen issues, especially when an auditor comes calling. We will walk through the process of creating a simple, yet effective, information security policy... from an auditor's point of view. Thu, 30 Aug 2018 00:00:00 -0400 https://speakerdeck.com/darrylmacleod/hacking-infosec-policies-cutting-through-the-jargon https://speakerdeck.com/darrylmacleod/hacking-infosec-policies-cutting-through-the-jargon