Information Systems Security Assessment Framework

← Back to document page

Information Systems Security Assessment Framework (ISSAF) draft TABLE OF CONTENTS. 1 EXECUTIVE SUMMARY ........................................ ........................................ ........................................ 15. 2 ABOUT 18. 3 THE Framework ........................................ ........................................ ........................................ ......... 26. 4 ENGAGEMENT 39. 5 GOOD PRACTICES PRE Assessment , Assessment AND POST Assessment ............... 55. 6 RISK Assessment ........................................ ........................................ ........................................ ......... 89. 7 ENTERPRISE Information Security POLICY ........................................ .............................. 107. 8 ENTERPRISE INFORMAITON Security ORGANIZATION & MANAGEMENT .................. 121. 9 ENTERPRISE Security & CONTROLS Assessment .

©2005, O pen Information S ystems Securit Grou Page 2 of 1263 Information Systems Security Assessment Framework(ISSAF) draft 0.2 TABLE OF CONTENTS

  Assessment, Security, Framework, Security assessment framework