Information Security Policy (ISP) Summaries

These policy summaries have been written to offer guidance on the ISP and how it applies to government personnel, including employees and other individuals such as contractors, volunteers and third-party organizations.

It is intended to identify and outline the basic responsibilities of managers and employees, to assist people to understand their role in protecting government information and information in the government’s custody.

Policy Summaries Overview (PDF 229KB)

No. 1 – The Information Security Policy (PDF 249KB)

No. 2 – Disposal of Information Storage Assets (PDF 223KB)

No. 3 – Portable Storage Devices (PDF 224KB)

No. 4 – Remote Access (PDF 220KB)

No. 5 – Mobile Computing (PDF 225KB)

No. 6 – Wireless Networking (PDF 224KB)

No. 7 – Security Threat and Risk Assessment (PDF 229KB)

No. 8 - Encryption (PDF 223KB)

No. 9 - Information Security Event and Incidents (PDF 223KB)

No. 10 – Investigations (PDF 220KB)

No. 11 – Monitoring and Logging (PDF 217KB)

No. 12 – Security Awareness (PDF 219KB)

No. 13 – Media Handling (PDF 226KB)

No. 14 – Working from Home (PDF 222KB)

No. 15 – Security Reviews and Audit (PDF 223KB)

No. 16 – Protection of Sensitive Information (PDF 226KB)

No. 17 – Business Continuity Planning (PDF 221KB)

No. 18 – Appropriate Use (PDF 227KB)

No. 19 – Information Sharing and Exchange Agreements (PDF 228KB)

No. 20 – Application Security (PDF 224KB)

No. 21 – Operational Security (PDF 222KB)

No. 22 – Contracted Services (PDF 223KB)

No. 23 – Security Certification and Accreditation (PDF 223KB)

No. 24 – Human Resource Security (PDF 221KB)

No. 25 – Information Security Architecture (Governance) (PDF 219KB)

No. 26 – Access Control Management (PDF 227KB)

No. 27 – Change Management (PDF 221KB)

No. 28 – Capacity Management (PDF 252KB)

No. 29 – Malicious Code (PDF 225KB)

No. 30 – System Security Plan (PDF 221KB)

No. 31 – Privileged Users (PDF 220KB)