Security Policies and Awareness
Development of Security Policies
SANS    Microsoft
Security Standards
NIST CSRC    Semper    CIsecurity.org
Security Guidelines and Patterns

Data Classification

Roles and Responsibilities

Awareness Programs

Total Security Awareness Powerpoint Presentation (modified version presented at CityIT & eForum 2003)