Yes, it's good book. It saves a lot of time. What you get is
not just the book, but the whole book on a disk so that you can
easily take the chapters you want, replace the company name, and
there you have your policy document. What percentage is useful
depends on what document you want to make. An overview policy
is naybe a few pages, while a detailed policy for a sysadm on
how to run a site is more detailed. You will find statements
that slides into any kind of policy (any level), plus a guide
on how to select the appropriate parts for what you are targeting.
Good value for money I would say ($495 is the cost of 5 hours of
your time, so calculate yourself).
Regards,
Kare
>
> From: "Christopher L. Werner" <cwerner @
fh .
us .
bosch .
com>
> Date: Wed, 15 Nov 1995 16:27:39 -0500
> Subject: "Information Security Policies Made Easy"
>
> Since there has been a thread discussing Security Policies running
> for a while... Has anyone seen or worked with Charles Cresson Wood's
> book on Security Policies? He claims to have over 600 policies available
> on diskette or printed. Is the collection worthwhile? About what percent
> of the files are really applicable/usable? They list about 72 companies
> who have 'used' them but $495.00 is a bit much for a book. :(
----------------------------------------------------------
| Kare Presttun Alcanet International |
| Tel: +33 1 4058 5614 33, rue Emeriau |
| Fax: +33 1 4058 5945 F-75015 Paris |
| Kare .
Presttun @
ansf .
alcatel .
fr FRANCE |
|
|