Will of the WISP: Your company's Written Information Security Program

Will of the WISP: Your company's Written Information Security Program:

Here are some links to free information and samples that can help you tackle the WISP creation and implementation:

• Massachusetts Written Information Security Plan developed by Buchanan & Associates of Boston (.pdf)
• Common misconceptions about the Mass privacy law
• A Small Business Guide: Formulating A Comprehensive Written Information Security Program (.pdf)
• A Sample Information Security Policy from Advanced System Integrators (.pdf)

There are several commercial vendors that offer tools for implementing policy, for example Info-Tech's Security Policy Implementation tool.

Edu: http://my.gwu.edu/files/policies/InformationSecurityPolicyFINAL.pdf