4 ms·

Thanks for this response. It seems like writing the policy might capture most of the value of an audit since it'll make all staff members aware of the risks we

Thanks for this response. It seems like writing the policy might capture most of the value of an audit since it'll make all staff members aware of the risks we face.

Bucephalus355 9y ago
Check out the “Defensive Security Handbook” from O’Reilly. It has some technical stuff, but it’s a lot more about policy and documentation. Side Bonus of Book: made me much more organized as a person in my life in general https://www.amazon.com/Defensive-Security-Handbook-Practices-Infrastructure/dp/1491960388 https://www.amazon.com/Defensive-Security-Handbook-Practices... NOTE: This book / the principles applies whether you manage your own infrastructure or just run off of web apps.
- hluska 9y ago
  Great suggestion - that is a great read and I used it quite extensively the last time I wrote a security policy.