Non-profit, international research initiative dedicated to defining standards in security testing and business integrity testing.

It has produced the standard to provide guidelines on all aspects of information security including IT, data, and computer controls.

International user group and hub for CobiT, the emerging IT control and security methodology.

a guide to developing computer security policies and procedures for sites that have systems on the Internet. Published 1997.

White paper providing the reader with new and innovative aspects on the process of building a Security Policy, as well as managing a Security Awareness Program.

A guide to computer and network security with a strong focus on writing and implementing security policy. This is primarily for security managers and system administrators.

An archive website from the Purdue Research Foundation, containing a range of example security policy sets.

This paper offers wide ranging advice on the development and implementation of security policies.

A substantial collection of papers and articles on the development and implementation of security policies.

Make and manage security policies. Run awareness programs with audits and e-learning to build a human firewall.