Hi all, I am pretty news on the field, some theoric knowledge but no hand on practice, I would like some help tips about the security policy well I have read a tone a paper about that from the BS7799, ISO 17799, clusif, ebios etc, SANS, GIAC, NSA, etc. a lot of informations, even technical one, but I looking for some information expecially about the method as ISO 17799 describ the objective but not how to achieve it. does anyone can help me to find information about method like cobit mehari ebios or any other, I would like to find guide on how to use it with sample if possible. Maybe someone to tell me where I can find the final version of the iso 17799 too thanks a lot !!! help me pls T_T
