Information Security Policies Made Easy version 8, book and companion CD-ROM, is the definitive resource tool for information security policies. Version 8 now includes an updated collection of 1100+ security policies and templates covering virtually every aspect of corporate security. Used by over 70% of the Fortune 100, Information Security Policies Made Easy is written by security policy expert and consultant Charles Cresson Wood, CISA, CISSP, who has over 20 years writing and implementing security policies worldwide. Information Security Policies Made Easy is literally an all-in-one security policy resource with templates, advice and instructions to help you generate practical, clear, and compelling information security policies for your organization-whether your organization is large or small. These tools will save hours of time and thousands of dollars developing information security policies.
About the Author
Charles Cresson Wood is an author and independent information security consultant based in Sausalito, California. In the information security field on a full-time basis since 1979, he has worked as an information security management consultant at SRI International (formerly Stanford Research Institute) as well as lead network security consultant at the Bank of America. He has done information security work with over 120 organizations -- many of them Fortune 500 companies -- including a large number of financial institutions and high-tech companies.
He is noted for his ability to integrate competing objectives (like ease-of-use, speed, flexibility and security) in customized and practical compromises that are acceptable to all parties involved. Acknowledging that information security is multi-disciplinary, multi-departmental, and often multi-organizational, he is additionally noted for his ability to synthesize a large number of complex considerations and then to document these in security architectures, system security requirements, risk assessments, project plans, policy statements, and other clear and action-oriented documents.