Information security policies, procedures, and standards: a practitioner's reference

This book supplies a blueprint on how to develop effective Information Security policies and procedures. It uses standards such as ISO 27001 and regulations such as HIPAA and PCIDSS as the foundation for the content. Highlighting key terminology, concepts, and document structures, it includes examples, checklists, sample policies and procedures, guidelines, and a synopsis of the ISO standards. Readers will develop the understanding needed to write effective policies and procedures clearly and concisely.