Security Plan Template

July 8th, 2009 · No Comments · Software Development

Security plan templates for software development lifecycle The Security Plan describes the system’s security requirements, the controls in place or planned, and roles / responsibilities of all authorized individuals who use the system.

This 25 page Word template and 7 Free Excel templates including a Threats Matrix, Risk Assessment Controls, Identification and Authentication Controls, Controls Status, Access Control Lists, Contingency Planning Controls, and an Application Inventory Form.

The Security Plan ensures that each employee knows the security boundaries and what the penalties of overstepping those boundaries will be. Use this template to:

Review security controls when system modifications are made.
Eliminate security vulnerabilities associated with the configuration of the organization’s systems/applications.
Implement a uniform approach to security across computer systems and databases.
Specify who creates user accounts, conventions for usernames and passwords, access requirements.
Identify how users are tracked, sensitive information is managed and steps to take for data protection.
Identify penalties to be enforced as a result of different levels of security breaches.

Download Now for only $9.99 – Buy Here!

Security Plan Screenshots

Executive Summary

Chapter 1, System Identification

Chapter 1.5, Information Contacts

System Protection Requirements Chart

Chapter 1.13, Threats Matrix

Chapter 2, Management Controls

Chapter 3, Operational Controls

Chapter 3.4, Contingency Planning

Chapter 4, Technical Controls

Download Now for only $9.99 – Buy Here!

1 System Identification
1.1 System Name
1.2 System Category
1.3 Objectives
1.4 Responsible Organization
1.5 Information Contacts
1.6 Assignment of Security Responsibility
1.7 Authorizing Official
1.8 System Description
1.9 System Environment
1.10 System Interconnection/Information Sharing
1.11 Applicable Laws or Regulations
1.12 Information Sensitivity and Criticality Assessment
1.13 Threats

2 Management Controls
2.1 Risk Assessment and Management
2.2 Review of Security Controls
2.3 Rules of Behavior
2.4 Planning for Security in the Life Cycle
2.5 Authorization to Process

3 Operational Controls
3.1 Personnel Security
3.1.1 Sensitivity Level
3.1.2 Required Background Screenings
3.1.3 Restriction of User Access
3.1.4 Process for User Accounts
3.1.5 Separation of Duties
3.1.6 User Accountability
3.1.7 Termination Procedures
3.2 Physical and Environmental Protection
3.3 Production Input/Output Controls
3.4 Contingency Planning
3.5 Hardware and Software Maintenance Controls
3.6 Data Integrity/Validation Controls
3.7 Documentation
3.8 Security Awareness and Training
3.9 Incident Response Capability

4 Technical Controls
4.1 Identification and Authentication
4.1.1 Password Policy
4.1.2 Account Lockout Policy
4.1.3 Kerberos Policy
4.2 Logical Access Controls
4.3 Public Access Controls
4.4 Audit Trails
4.4.1 Audit Policy
4.5 Ongoing Security Management

5 Appendix A
5.1 Glossary of Terms

7 Free Excel templates

Threats Matrix

Risk Assessment Controls

Identification and Authentication Controls

Controls Status

Access Control Lists

Contingency Planning Controls

What’s included in the Security Plan?

These template are in Microsoft Word and Excel format and can be downloaded online for only $9.99. The template pack includes the following documents:

Security Plan	25 pages
Application Inventory Form	1 Form
Threats Matrix	1 worksheet
Risk Assessment Controls	1 worksheet
Identification and Authentication Controls	1 worksheet
Controls Status	1 worksheet
Access Control Lists	1 worksheet
Contingency Planning Controls	1 worksheet