| Subject: | releasing confidential docs |
| Posted by: | Rodo (ralvara…@crihire.com) |
| Date: | Wed, 25 Oct 2006 |
have a question. I have a potential client asking for Security documents
from my company. They include, IT Org chart, Information Security Policy,
Data Classification Policy, Data Retention Policy, Data Destruction Policy,
Risk Assessment Standard, System Backup Policy, Business Continuity Plan
Summary, Disaster Recovery Plan Summary. In your opinion, does releasing
this info make for a security violation? Would signing of Non-Disclosure be
enuf to protect my company?
thx