I use a PERL script downloaded from ISS support that spits the policy out into a spreadsheet.
I drop the font to 9 pt. Arial. I add header with page, name, and date. Shrink margins so there is just enough room for the header/footer; go to the edges right and left margin. I add a column on the left and insert numbers for easy reference during teleconferences. Format the columns for "best" use of space while keeping the thing on an 8x14 legal page. I delete the description column cause we security techies already know that stuff (actually the name is usu self explanatory and I need the space). I add a wide column on the right to enter Changes/Updates. In that column I place the word CHANGE: to indicate when the policy on that line changed from the previous version (either Enabled or Disabled); usually a SHORT reason justifying the change is given as well. I will probably also have to put advanced settings in this column as well since the PERL script does not capture those policy settings. This spreadsheet is the best way I have found to compare policies and to draw attention to policy changes from one version to another. ____________________________________________ Doug Maxham, CISSP W 919.501.9219 -----Original Message----- From: Hall, Anthony [mailto:Anthony.Hall@;gs.com] Sent: Friday, November 01, 2002 11:40 AM To: '[EMAIL PROTECTED]' Subject: [ISSForum] Managing Policies What tools/scripts are you folks using to manage/edit your policies beyond the Policy Editor and the tools available on iss.net? TIA, A Monty Hall Goldman, Sachs & Co 85 Broad Street | New York, NY 10004 Tel: 917.343.3604 [EMAIL PROTECTED] _______________________________________________ ISSForum mailing list [EMAIL PROTECTED] _______________________________________________ ISSForum mailing list [EMAIL PROTECTED]
