§01
About this domain.
This directory contains organization-neutral information security governance artefacts. Their original content is released under CC BY-SA 4.0; a quotation that NOTICE.md allows or keeps under its transition clause keeps its source licence and is not relicensed under CC BY-SA 4.0. The domain covers security governance, identity and access management, logging and monitoring, data classification, secure operations, incident response, vulnerability management, secure development, and technical control baselines.
§02
Documents.
38 documents in this domain. Each links to its source on GitHub, where the corpus is version-controlled and continuously gated.
- PolicyAcceptable Use Policy↗
- PolicyAcceptance Into Service Policy↗
- PolicyBring Your Own Device (BYOD) Policy↗
- PolicyEncryption and Key Management Policy↗
- PolicyIdentity and Access Management Policy↗
- PolicyInformation Security Policy↗
- PolicyNetwork Communications Security Policy↗
- PolicyWorkforce Network Monitoring Policy↗
- FrameworkCryptographic Key Lifecycle Management Framework↗
- FrameworkInsider Risk Programme Framework↗
- FrameworkZero Trust Architecture Framework↗
- StandardAuthentication and Password Management Standard↗
- StandardData Classification and Handling Standard↗
- StandardData Loss Prevention Standard↗
- StandardEmail Security Standard↗
- StandardEndpoint Hardening Standard↗
- StandardLogging and Monitoring Standard↗
- StandardMonitoring Integrity and Coverage Standard↗
- StandardPenetration Testing and Red Team Standard↗
- StandardPersonnel Security Screening Standard↗
- StandardPrivileged Access Management Standard↗
- StandardRemote Working Security Standard↗
- StandardSaaS Security Posture Management Standard↗
- StandardSecurity Awareness and Training Standard↗
- StandardSecurity Operations Centre Operating Model Standard↗
- StandardThreat Modelling Standard↗
- ProcedureAccess Control Procedure↗
- ProcedureCryptographic Key Operations Procedure↗
- ProcedureIdentity Management Procedure↗
- ProcedureIT Onboarding and Offboarding Procedure↗
- ProcedureKey Escrow and Recovery Procedure↗
- ProcedureSecurity Disciplinary Process Procedure↗
- ProcedureSecurity Incident Response Procedure↗
- ProcedureVulnerability Management Procedure↗
- SOPIncident Escalation Matrix↗
- SOPSecurity Ticket Reporting Scheme↗
- RoadmapPost-Quantum Cryptography Readiness Roadmap↗
- RegisterApproved Key-Agreement Protocols Register↗