Customer Reviews

Information Security Policies Made Easy Version 9

5 star:		(3)
4 star:		(0)
3 star:		(0)
2 star:		(0)
1 star:		(0)

 

 

I keep books in two places, a small shelf near my computer that I can reach and a large bookshelf across the room. This book deserves a place on the small shelf within arm's reach.

If you are a manager, before you ever make a decision, or approve a policy, look the topic up, there is a good chance you will see something you didn't think of.

Let me give you an example, our company used to have a fairly long Non-Diclosure Agreement (NDA) prepared by our attorney for a specific purpose. However, we decided to create a simpler, general purpose NDA for all 1099 contractors. The lawyer created it and before I approved it I checked it against the book. I found three items that really should have been in our NDA that we would have missed, thank you Mr. Wood!

If you are a techie do you need this book? Sure, because everything we do as a techie or engineer has liability implications for the company. Each topic is very clear, concise, and well thought out. It takes a few seconds to look it up, about two minutes to read the section and that investment is well worth your time.

Yes, this is an expensive book, however, it is worth the investment, every organization should have at least one copy. S.

Master plumbers often find that a portion of their business derives from fixing jobs that homeowners thought were simple enough to do themselves. Many business professionals approach information security policies the same way novices approach a leaky pipe. They try to save time and money by doing it themselves; then they are overwhelmed by the unexpected complexity of the task. In the end, they have to call on a professional to repair the damage; ultimately costing them more time and money than if they had gone the professional route at the start.

Those who are serious about information security policy should plumb the depth of wisdom contained in Information Security Policies Made Easy, Version 9. This latest version has updated the text of nearly 1,400 policies, and the policies are organized to track ISO 17799, a broad information-security standard.

This newest version rectifies the only serious shortcoming of versions past: the lack of a cross-referencing tool. Version 9 contains a Web-based CD-ROM that is fully linked and searchable. Other advances include policies addressing new legislation such as the Healthcare Insurance Portability and Accountability Act and the Gramm-Leach-Bliley Act. With this update, the flow of information through any company's pipelines is sure to be more secure.

Anyone who is chartered with the creation of a set of a comprehensive set of information security policies and procedures should definitely use Information Security Policies Made Easy. It is the definitive reference and definitely lives up to its billing.

If you want a great book on policy this is it.

The ultimate in cut and paste.

CC Wood did all the work.

All you have to do is choose, cut, paste and edit.

OK, it is more than that, but this book gets you to third base. It is only a short run to home plate afterwords.