Written Information Security Program










		Become Compliant With Affordable & Customized Information Security Policies

For your company to meet legal requirements such as SOX, FACTA, PCI DSS, HIPAA, GLBA, Oregon SB583, Nevada SB227, or the Massachusetts 201 CMR 17.00, your company must have a documented Information Security Management System (ISMS) in place. Our Written Information Security Program (WISP) is a cohesive and editable compilation of policies, procedures, standards and guidelines that are designed with one purpose in mind - provide you with the professionally written documentation necessary to become compliant with your requirements.


		*”WHAT MOST BUSINESSES FAIL TO REALIZE IS THAT A SINGLE DATA BREACH CAN CLOSE A BUSINESS FOREVER, BECAUSE STANDARD LIABILITY INSURANCE DOES NOT COVER PROFESSIONAL NEGLIGENCE.”*

	Simply put, without the ability to demonstrate documented steps were taken to ensure due care and due diligence were applied to your business operations, your company may be considered negligent in a lawsuit. This means you will be solely responsible for the financial damages from lawsuits, fines, and notification expenses from any data breaches. Insurance companies are in the business to make money from getting paid premiums and do not want to pay out unless they have to. Insurers will only pay for claims that are within the scope of the issued policy. When you are non-compliant with a law or industry requirement, it easy for insurers to deny your claim due to professional negligence on your business’ part, based on objective standards not being met.



	All documents are reviewed by a CISSP


	Why Does Your Business Need A Written Information Security Program (WISP)?

The reason is simple: Information Security policies are entirely focused on protecting your business! Professionally written policies provide the necessary steps to document the due care and due diligence your business needs to prove compliance with Information Security laws and industry regulations. While you spend thousands of dollars a year on business liability insurance, purchasing a Written Information Security Program (WISP) from iSecurityPolicy.com might be the most cost-effective protection you can provide for your company.


	The Written Information Security Program (WISP) contains the following policies:

Acceptable Use	Analog Line (POS systems)	Business Continuity Planning	Change Control
Computer Lifecycle Program	Data Breach	Data Classification	Data Collection
Data Lifecycle	Data Storage	Developing Secure Systems	Digital Signatures
Disaster Recovery Plannning	Electronic Communications	Electronic Communications Retention	Encryption
Firewall Security	Identity Theft Protection	Incident Response	Information Asset Issue
Information Assurance (IA)	Information Security Management	Intranet	Malicious Software
Non-Regulatory Compliance	Operating System	Operational Security	Password
Personal Communication Device	Personal Use	Privacy & Monitoring	Regulatory Compliance
Remote Access (VPN)	Risk Assessment	Router Security	Service Provider
User Security Training	Vulnerability Assessment	Wireless Communications


	WISP includes forms to allow businesses to implement a security program within minutes:

Terms & Definitions	User Policy Acknowledgement Form	User Equipment Issue Form
Contractual Service Provider NDA Form	Incident Response Form	Change Management Request Form
Administrator Account Request Form	Information Security Officer (ISO) Orders	References & End Notes

The good news is iSecurityPolicy.com is here to help your business become and stay compliant with all applicable Information Security laws and industry requirements, such as the Payment Card Industry Data Security Standard (PCI DSS). The threats are real, so you need to be prepared to both protect your company from these incidents and also have the ability to prove documentation of the steps you took to provide due care and due diligence. Additionally, consumers want to do business with companies that they trust will protect their personal information and credit card numbers.


	”The industry's first source for a customized, on-demand Written Information Security Program (WISP) that is specifically tailored for small and medium sized business. Since we follow industry-recognized best practices, we reference applicable laws, requirements, standards, and best practices that businesses need to follow to be considered compliant.”

We are here to assist those businesses that lack our specialized knowledge & experience
Information Security is too important to be left to amateurs or partial solutions
Every company needs robust security policies, procedures, standards & guidelines
Our policies are written in a business-context so users can clearly grasp requirements
Our products are based on industry-recognized best practices & standards
Our solution is affordable and straightforward to implement

Our experience has proven that a standard is a standard for a reason. With that in mind, iSecurityPolicy.com offers the Written Information Security Program (WISP) based on published standards and legal requirements. Unlike some competitor sites that offer “Bronze, Silver or Gold” packages, iSecurityPolicy.com offers a single, comprehensive solution to meet your compliance requirements. In the real world, compliance is penalty-centric. The court systems have established a track record of punishing businesses for failing to meet compliance with known standards. In terms of Information Security compliance, what you do not know has the proven ability to hurt you.

Lesser products are a liability that could prove immensely costly if they do not meet all of your current and future compliance needs. Unfortunately, ignorance is neither bliss, nor is it an excuse! What your employees do not know has the proven ability to hurt your company. In terms of liability for a company, security does not exist until it is documented.

Most smaller businesses lack a dedicated IT staff and must rely on outsourced expertise. This is a good solution for most IT needs, but the vast majority of IT companies that support smaller businesses lack the expertise to properly consult their clients on Information Security and what compliance issues they should be concerned with. This is where iSecurityPolicy.com is a wonderful resource, since our Information Security products and services can be implemented by your current IT provider. We can provide them with the roadmap and the tools to properly secure your network and make you compliant. It is as easy as that!


	Order today - 39 professionally written Information Security policies, customized for your company!

Written Information Security Program (WISP)	HackerView Vulnerability Assessment	PCI Compliance Combo


	[Home] [Products] [Examples] [FAQs] [Reasons To Buy] [Compliance Guide] [Links] [Buy Online] [About Us] [Contact Us]

Copyright 2005-2010. All rights reserved.
iSecurityPolicy.com is a division of BlackHat Consultants, LLC. BlackHat Consultants, LLC is Veteran owned.
We are proud to support other small & medium businesses that help make this a great country.

Become Compliant With Affordable & Customized Information Security Policies