1 DEFINITION OF INFORMATION

2 WHAT IS INFORMATION SECURITY?

3 WHY DO WE NEED TO PROTECT INFORMATION?

4 WHAT INFORMATION SHOULD BE PROTECTED?

1 INTRODUCTION

2 INFORMATION AVAILABILITY (BUSINESS CONTINUITY)

3 INFORMATION INTEGRITY

4 INFORMATION CONFIDENTIALITY

1 INTRODUCTION

2 INFORMATION OWNER

3 CUSTODIAN

4 INFORMATION USER

1 INTRODUCTION

2 INFORMATION CLASSIFICATION PROCESS

3 RECLASSIFICATION

1 INTRODUCTION

2 INFORMATION LABELING

3 INFORMATION USE AND DUPLICATION

4 INFORMATION STORAGE

5 INFORMATION DISPOSAL

1 INTRODUCTION

2 ACCESS AUTHORIZATION

3 ACCESS CONTROL

4 BACKUP AND RECOVERY

5 AWARENESS

1 GENERAL

2 RIGHT TO REVIEW

3 DESKTOP PROCESSING

4 TRAINING

5 PHYSICAL SECURITY

6 PROPRIETARY SOFTWARE - CONTROLS AND SECURITY

7 SOFTWARE CODE OF ETHICS

8 COMPUTER VIRUS SECURITY

1 INTRODUCTION

2 COMPANY INFORMATION SYSTEMS STEERING COMMITTEE

3 COMPANY INFORMATION SECURITY PROGRAM

4 ORGANIZATION INFORMATION SECURITY PROGRAM

1 INTRODUCTION

2 PRE-PROGRAM DEVELOPMENT

4 PROGRAM IMPLEMENTATION PHASE

5 PROGRAM MAINTENANCE PHASE

1 INFORMATION HANDLING PROCEDURES MATRIX

2 GLOSSARY

3 INFORMATION IDENTIFICATION WORKSHEET

4 INFORMATION RISK ASSESSMENT WORKSHEET

5 SUMMARY AND CONTROLS WORKSHEET

6 RISK ASSESSMENT: SELF-ASSESSMENT QUESTIONNAIRE