<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2658.2">
<TITLE>Policy Writing (Possibly Off-Topic)</TITLE>
</HEAD>
<BODY>
<P ALIGN=LEFT><FONT SIZE=2 FACE="Arial">Hello all,</FONT></P>
<P ALIGN=LEFT><FONT SIZE=2 FACE="Arial">In the wake of SOx compliance, I</FONT><FONT SIZE=2 FACE="Arial">'</FONT><FONT SIZE=2 FACE="Arial">m now in the position of having to generate or advance some</FONT> <FONT SIZE=2 FACE="Arial">security</FONT> <FONT SIZE=2 FACE="Arial">policy work in areas that I</FONT><FONT SIZE=2 FACE="Arial">'</FONT><FONT SIZE=2 FACE="Arial">ve never investigated before (O/S Build Standard, Application/System Development, 3</FONT><SUP><FONT SIZE=2 FACE="Arial">rd</FONT></SUP><FONT SIZE=2 FACE="Arial"></FONT> <FONT SIZE=2 FACE="Arial">Party System Development). While I understand that this list is more on the operational side of things, I was hoping that someone (or a few) have had some exposure to the policies I</FONT><FONT SIZE=2 FACE="Arial">'</FONT><FONT SIZE=2 FACE="Arial">ve listed above and my be able to point me in the correct (passing an audit) direction.</FONT></P>
<BR>
<P ALIGN=LEFT><FONT SIZE=2 FACE="Arial">Many thanks in advance,</FONT></P>
<P ALIGN=LEFT><A NAME="_MailAutoSig"><FONT FACE="Arial">Michael Cullen</FONT></A></P>
<P ALIGN=LEFT><I><FONT SIZE=2 FACE="Arial">Sr. Security Engineer</FONT></I></P>
<P ALIGN=LEFT><B><FONT SIZE=2 FACE="Arial">Universal Music Group</FONT></B></P>
<P ALIGN=LEFT><FONT SIZE=2 FACE="Arial">(818) 777-4049</FONT></P>
<P ALIGN=LEFT></P>
</BODY>
</HTML>