Looking for written 'security' policies? 1

[BobMCT]

Gentlemen;

While a windows user (XP Pro) I am primarily a *nix admin. But some new applications have required the installation of some Win Svr 2003 servers and an AD controller (actually running on a WS2.3K server).

For compliance issues (GLBA/SOX/etc) we need to create a rather strict security policy mostly for the admins and access to shares, etc.

Not wanting to reinvent the wheel because this is new territory, I am hoping that someone reading this "might" already have a policy to share or even point me to a place that may have some written or the taking or purchase?

Some of the requirements in the regs are quite foreign to me .

Any help/suggestions really appreciated. (Our Gvmnt at Work)

 

[tfg13]

This might be of use to you:

http://www.sans.org/reading_room/whitepapers/policyissues/?portal=24f1312e37cb8dde035dd9de97b4dcb5

They have other great stuff that you might be able to use in the future:

http://www.sans.org/reading_room/?portal=9d668f62d721910411509f0f6f0d634f