I have decided to write a network security policy for the company and my my directors buy-in. I need to decide whether to hug close to NIST or ISO standards as we are going to chose one of them to shoot for eventually.
Which would you go for and why? Also anyone have links to a pretty good template policy I can modify to make work for my environment?
No comments:
Post a Comment