Compliance standards, of which there are many, can be and should be used as a guide to write comprehensive and effective security policies. Many standards cover much of the same topics, but state the requirements in a slightly different way. This book provides a simplified way to write policies that meet the major regulatory requirements, without having to manually look up each and every control. It supplies a way to address the regulatory requirements of the organization by writing policy statements that address these requirements.