It/244 Intro to It Security

Associate Level Material

Appendix B

Information Security Policy

Student Name: Denis White

University of Phoenix

IT/244 Intro to IT Security

Instructor’s Name: Andrew Tatusko

Date: June 22, 2014

Table of Contents

1.        Executive Summary        

2.        Introduction        

3.        Disaster Recovery Plan        

3.1.        Key elements of the Disaster Recovery Plan        

3.2.        Disaster Recovery Test Plan        

4.        Physical Security Policy        

4.1.        Security of the facilities        

4.1.1.        Physical entry controls        

4.1.2.        Security offices, rooms and facilities        

4.1.3.        Isolated delivery and loading areas        

4.2.        Security of the information systems        

4.2.1.        Workplace protection        

4.2.2.        Unused ports and cabling        

4.2.3.        Network/server equipment        

4.2.4.        Equipment maintenance        

4.2.5.        Security of laptops/roaming equipment        

5.        Access Control Policy        

6.        Network Security Policy