Information Security Manual

This manual provides strategic guidance for organisations to protect their information technology and operational technology systems, applications and data from cyber threats. It outlines a cyber security framework that provides practical guidance relevant to specific systems an organisation may operate.

Main sections:

· Cyber security principles

· Guidelines for cyber security roles

· Guidelines for cyber security incidents

· Guidelines for procurement and outsourcing

· Guidelines for security documentation

· Guidelines for physical security

· Guidelines for personnel security

· Guidelines for communications infrastructure

· Guidelines for communications systems

· Guidelines for enterprise mobility

· Guidelines for evaluated products

· Guidelines for information technology equipment

· Guidelines for media

· Guidelines for system hardening

· Guidelines for system management

· Guidelines for system monitoring

· Guidelines for software development

· Guidelines for database systems

· Guidelines for email

· Guidelines for networking

· Guidelines for cryptography

· Guidelines for gateways

· Guidelines for data transfers

· Cyber security terminology