Courses

Unless functional security requirements are translated into realistic technical specifications, the final solution may be overly restrictive and expensive or, worse still, seriously insecure. To help achieve the necessary balance, this course demonstrates how to interpret and extend the Government Security Policy (GSP) and other related policies to system specific requirements, both functional and technical, as part of a system development life cycle.

• Understand the Government Security Policy and related policies
• Establish system specific security policies regarding:
• acceptable use
• access and privilege controls
• asset sharing
• configuration management and change control
• confidentiality, integrity, availability and privacy
• the use of related technologies, such as wireless devices

Recommended preparation: Course S50 - Certification and Accreditation (C&A;): Achieving Confidence and Accountability, or equivalent

• Click on the hyperlink above.
• Scroll down to "SANS: Training, Certification and Research" and double-click.
• Once at the SANS homepage, click on the tab "Sample Policies", located on the red menu.