Institute for Information Assurance

Information Security Websites

NIST Computer Security Resource Center
http://csrc.nist.gov/index.html

NIST  Special Publications (800 Series)
http://csrc.nist.gov/publications/PubsSPs.html

Common Criteria Evaluation and Validation Scheme
http://www.niap-ccevs.org/cc-scheme/
http://www.commoncriteriaportal.org/

CERT
http://www.cert.org/cert/

SecurityFocus – Bugtraq Center
http://www.securityfocus.com

International Information Systems Security Certification Consortium, Inc., (ISC)²
http://www.isc2.org/

SysAdmin, Audit, Network, Security (SANS)
http://www.sans.org

Information Systems Audit and Control Association
www.isaca.org

Computer Security Institute
http://www.gocsi.com/

SearchSecurity
http://searchsecurity.techtarget.com/

Information Security Magazine
http://searchsecurity.techtarget.com/magazineCurrent/0,296884,sid14,00.html

SCMagazine for Information Security Professionals
www.scmagazineus.com

CSO Magazine
http://www.csoonline.com

Argonne National Laboratory
Scavenger an open source real-time vulnerability management tool
https://trac.anl.gov/scavenger/wiki

CyberCiege
http://cisr.nps.edu/cyberciege/latestv.html

Department of Energy Cyber Incident Response Capability (DOE-CIRC)
http://www.doecirc.energy.gov/

National Vulnerability Database
http://nvd.nist.gov/

National Security Agency – Central Security Service
http://www.nsa.gov/ia/

Common Vulnerabilities and Exposure
http://cve.mitre.org

The Information Warfare Site
http://www.iwar.org.uk/index.htm

Executive women’s Forum
http://www.infosecuritywomen.com

The International High Technology Crime Investigation Association (HTCIA)
http://www.htcia.org/

International Information Systems Forensics Association (ITFSA)
www.iisfa.org

Information Security Standards and Regulations

ISO 27000 Information Security Standards
http://www.27000.org/index.htm

The Health Insurance Portability and Accountability Act of 1996 (HIPAA)
http://www.hhs.gov/ocr/privacy/index.html

Sarbanes-Oxley (SOX) Section 404
http://www.sec.gov/info/smallbus/404guide.shtml
http://www.sec.gov/rules/final/33-8238.htm

COBIT Framework
www.isaca.org

COSO Framework
http://www.coso.org/

To top