Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We're creating a Security Policy for our company. I'm looking for examples I can use as a boiler plate for ours.


share|improve this question
That's about as broad and sweeping a question as it can get. Feel free to throw in some specifics. e.g. Are you talking computers, building security, information security, personnel security, protection against nuclear explosions, etc., etc.? – John Gardeniers Sep 29 '10 at 21:52
up vote 1 down vote accepted

There are quite a few out there. If you haven't found them already, the SANS institute has a broad selection of template policies:

They've been around for a long time. Those policies are really good reading, and should allow you to build your own.

share|improve this answer
I found them, good material – I.T. Support Sep 29 '10 at 19:15

Wouldn't this kind of depend on your company, size, configuration, and culture for the business?

What things do you already allow or disallow?

Do you lock down your systems? Allow installation of things by users? Are your users developers or are they mostly secretarial or are your systems used as kiosks or are they customized? Are they shared?

Are you mostly roaming users? Workstations? Do you allow visitor systems on your network?

Do you deal with intellectual property like your own software, so you disallow USB drives or burnable CD's? Monitor electronic communication?

The basics are things that are covered in a number of places I think. But a general boiler plate policy might not be a great idea in my opinion. There's no single answer to this. You might be better off asking as a wiki question what should be considered in creating a security policy so you can customize it to your own needs and experiences.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.