This appendix briefly introduces the SANS Institute, what it is and what it does. The appendix also explains the Security Policy Project and gives examples of security policies. Much of the material of this appendix is quoted directly from the SANS Institute website.