comply/themes/comply-soc2/policies/information.md

name: Information Security Policy acronym: ISP satisfies: TSC: - CC9.9 majorRevisions:

• date: Jun 1 2018 comment: Initial document

---

Overview

The Information Security Policy is a composite policy referencing other Acme policies relevant to information security.

Component Policies

The Acme Information Security Policy is composed of:

• Application Security Policy (Acme-ASP.pdf) {-}
• Cyber Risk Management Policy (Acme-CRP.pdf) {-}
• Data Classification Policy (Acme-DCP.pdf) {-}
• Data Retention Policy (Acme-ASP.pdf) {-}
• Datacenter Security Policy (Acme-ASP.pdf) {-}
• Encryption Policy (Acme-ASP.pdf) {-}
• Password Policy (Acme-ASP.pdf) {-}
• Remote Access Policy (Acme-ASP.pdf) {-}
• Removable Media Policy (Acme-ASP.pdf) {-}
• Security Incident Response Policy (Acme-ASP.pdf) {-}
• Workstation Security Policy (Acme-ASP.pdf) {-}