The 2011 (ISC)2 Security Congress

More documents

Recommendations

Info

NetSafe: The Internet Safety Group www.netsafe.org.nz SingCert Young New Zealanders’ Foundation Internet Safety www.4safetytoday.com/internet-safety.php EUROPE, MIDDLE EAST, AFRICA Safe Surfing with Doug www.disney.co.uk/DisneyOnline/Safesurfi ng Bank Safe Online UK www.banksafeonline.org.uk BSI für Bürger www.bsi-fuer-buerger.de Chatdanger www.chatdanger.com Action for Children www.actionforchildren.org.uk ComReg-The Consumer Website of the Commission for Communications Regulation www.askcomreg.ie e-handelsfonden www.forbrugersikkerhed.dk makeITsecure.ie www.makeitsecure.ie secure-it.nrw www.secure-it.nrw.de think U know www.thinkuknow.co.uk Industry Portals — Resources Online NORTH AND SOUTH AMERICA Alta Associates www.altaassociates.com Help Net Security http://www.net-security.org GovernmentSecurity.org www.GovernmentSecurity.org The Association for Computing Machinery Portal http://portal.acm.org/portal.cfm The Biometric Consortium www.biometrics.org Biometric Industry Resource Guide www.fi ndbiometrics.com Dictionary of Computer Security Terms www.itsecurity.com eSecurityPlanet.com www.esecurityplanet.com The Ethical Hacker Network www.ethicalhacker.net Federal News Radio www.FederalNewsRadio.com Firewall.com www.fi rewall.com Identity Management Solutions Information www.insideid.com IT Toolbox-Knowledge Portal for Security Professionals http://security.ittoolbox.com Linux Security Information www.linuxsecurity.com Modulo Security (Portal of Information Security) www.modulo.com.br Neil’s Security and Privacy Resources www.jjtc.com/Security 24 INFOSECURITY PROFESSIONAL ISSUE NUMBER 16 SearchSecurity.com http://searchsecurity.techtarget.com SecurityFocus News and Information www.securityfocus.com Security News Portal for Information Systems Security Professionals www.securitynewsportal.com SRI International Computer Science Laboratory www.csl.sri.com InfoSysSec.com www.InfoSysSec.com SecurityForumX.com www.SecurityForumX.com SecurityChatX.com www.SecurityChatX.com Windows Security.com-Network Security Library http://www.windowsecurity.com/whitepapers The Open Web Application Security Project www.owasp.org ASIA-PACIFIC Australian Security Industry Association Limited www.asial.com.au eSafety Channel http://security.zol.com.cn InfoSec Hong Kong www.infosechk.org EUROPE, MIDDLE EAST, AFRICA Biometrie-Online http://www.biometrie-online.net ICT Ireland www.ictireland.ie ICT Switzerland www.ictswitzerland.ch/de Internet Services Providers’ Association (ISPA) www.ispa.org.uk Internet Watch Foundation www.iwf.org.uk Irish Information Security Forum www.iisf.ie Nigerian Computer Society www.nigeriancomputersociety.com .SE (The Internet Infrastructure Foundation) www.iis.se Securitymanager.de www.securitymanager.de Secuser.com www.secuser.com SecurityVibes.com http://www.securityvibes.com/fr Government Online Resources NORTH AND SOUTH AMERICA DoD IA Policy Chart http://iac.dtic.mil/iatac/ia_policychart.html Federal Republic of Brazil www.brasil.gov.br Ministry of Communications www.mc.gov.br Ministry of Justice www.mj.gov.br Ministry of Science and Technology www.mct.gov.br National Institute of Technology www.int.gov.br Canadian Security and Intelligence Service www.csis-scrs.gc.ca Communications Security Establishment Canada’s National Cryptologic Agency www.cse-cst.gc.ca Office of the Privacy Commissioner of Canada www.privcom.gc.ca/index_e.asp Public Safety and Emergency Preparedness Canada www.psepc-sppcc.gc.ca Banco de México (Central Bank) www.banxico.gob.mx Mexican Secretariat of Communications and Transportation www.sct.gob.mx MEXOnline.com Guide to México (Government Sites) www.mexonline.com/mexagncy.htm Servicio de Administracion Tributaria (SAT) www.sat.gob.mx U.S. DEPARTMENT OF COMMERCE Computer Security Resource Center http://csrc.nist.gov The Common Criteria Evaluation and Validation Scheme (CCEVS) www.niap-ccevs.org/cc-scheme Computer Security Division, Information Technology Laboratory http://csrc.nist.gov Cyber Security Tips-Small Business Corner, Computer Security Resource Center, National Institute of Standards and Technology http://csrc.nist.gov/groups/SMA/sbc/ index.html National Institute of Standards and Technology, Computer Security Portal www.nist.gov/computer-security-portal.cfm Public/Private Security Practices www.csrc.nist.gov/pcig/ppsp.html Federal Computer Security Program Managers Forum, Computer Security Resource Center http://csrc.nist.gov/organizations/cspmf.html National Information Assurance Training and Education Center http://niatec.info/ViewPage.aspx?id=0 Awareness, Training and Education, National Institute of Standards and Technology http://csrc.nist.gov/groups/SMA/ate/ index.html U.S. DEPARTMENT OF DEFENSE Central Security Service, Information Assurance www.nsa.gov/ia Information Assurance Technical Framework Forum (IATFF), National Security Agency-sponsored public/ private/academic forum www.iatf.net National IA Education & Training Program http://www.nsa.gov/ia/academic_outreach/ iace_program/niaetp.shtml National Security Agency www.nsa.gov/ia Center for High Assurance Computing Systems (CHACS), Information Technology Division, Naval Research Laboratory http://www.nrl.navy.mil/chacs Defense Information Systems Agency (DISA), Information Assurance Support Environment (IASE), The DOD IA Portal http://iase.disa.mil
Department of Defense www.defenselink.mil Department of Defense Information Assurance Working Groups http://iase.disa.mil/ia-working-groups.html U.S. Marine Corps C4II Information Assurance Division The Information Assurance Technology Analysis Center (IATAC), Defense Technical Information Center (DTIC), Defense Information Systems Agency (DISA) http://iac.dtic.mil/iatac EXECUTIVE OFFICE OF THE PRESIDENT Homeland Security Information www.whitehouse.gov/issues/homeland-security National Commission on Terrorist Attacks Upon the United States www.9-11commission.gov Office of Management and Budget Guidance on FISMA www.whitehouse.gov/omb/memoranda/ m03-19.pdf U.S. DEPARTMENT OF ENERGY Offi ce of the CIO, CyberSecurity Page http://cio.energy.gov/cybersecurity.htm Information Security Resource Center (ISRC), Pacific Northwest, National Laboratory (PNNL) National Nuclear Security Administration www.nnsa.doe.gov U.S. DEPARTMENT OF HOMELAND SECURITY National Strategy to Secure Cyberspace www.dhs.gov/fi les/publications/editorial_ 0329.shtm Build Security In Home https://buildsecurityin.us-cert.gov/daisy/ bsi/home.html Emergency Preparedness Guidance (Ready.gov), Specific Threats and Responses www.ready.gov Homeland Security Advanced Research Projects Agency (HSARPA) http://www.dhs.gov/fi les/grants/scitech.shtm Homeland Security Advisory System www.dhs.gov/dhspublic/display?theme=29 National Infrastructure Advisory Council, Vulnerability Disclosure Framework www.dhs.gov/xlibrary/assets/vdwgreport.pdf National Infrastructure Protection Plan www.dhs.gov/dhspublic/interapp/editorial/ editorial_0827.xml Protected Critical Infrastructure Information (PCII) Program http://www.dhs.gov/fi les/programs/ editorial_0404.shtm State Homeland Security Contacts www.dhs.gov/xgovt/editorial_0291.shtm U.S. Department of Homeland Security www.dhs.gov The U.S. Computer Emergency Readiness Team, The National Cyber Security Response System www.us-cert.gov U.S. DEPARTMENT OF JUSTICE Federal Bureau of Investigation, Cyber Crime Portal www.fbi.gov/about-us/investigate/cyber/cyber Computer Crime and Intellectual Property Section (CCIPS) of the Criminal Division, National Computer Crime Center www.cybercrime.gov InfraGard, Federal Bureau of Investigation www.infragard.net Internet Crime Complaint Center (IC3) www.ic3.gov U.S. GENERAL SERVICES ADMINISTRATION Privacy Program www.gsa.gov/portal/category/21419 OTHER U.S. GOVERNMENT AGENCY RESOURCES Biometrics.gov www.biometrics.gov Central Intelligence Agency https://www.cia.gov Committee on National Security Systems www.cnss.gov Federal Chief Information Officers Council www.cio.gov Federal Trade Commission, FTC Identity Theft Guidelines www.consumer.gov/idtheft Federal Trade Commission, Online Security-Related Resources www.onguardonline.gov U.S. General Services Administration Information Security Program www.gsa.gov/portal/content/104257 Interagency OPSEC Support Staff www.ioss.gov National Communications System www.ncs.gov National Coordinating Center for Telecommunications (NCC) www.ncs.gov/ncc National Science Foundation, Digital Government Research Program www.digitalgovernment.org National Science Foundation, Office of Cyberinfrastructure (OCI) www.nsf.gov/div/index.jsp?div=OCI Office of the Director of National Intelligence www.dni.gov Office of the National Counterintelligence Executive (ONCIX) ASIA-PACIFIC State Information Center www.sic.gov.cn Commerce, Industry and Technology Bureau, Anti-Spam www.antispam.gov.hk Commerce and Industry Branch Intellectual Property Protection www.citb.gov.hk/cib/ehtml/intell.html Department of Justice Bilingual Laws Information System www.legislation.gov.hk Other U.S. Government Agency Resources Office of Personnel Management, Scholarship for Service, Cyber Corps-Defending America’s Cyberspace www.sfs.opm.gov Other U.S. Government Agency Resources OnGuard Online http://onguardonline.gov/index.html Attorney-General’s Department Crime Prevention www.ag.gov.au/agd/WWW/ncphome.nsf/ Page/Information_Kits Australian Federal Police Australian High Tech Crime Centre www.afp.gov.au/policing/e-crime.aspx Australian Government Information Management Office (AGIMO) www.agimo.gov.au/infrastructure Australian National Audit Office www.anao.gov.au Australian National Security www.ag.gov.au/agd/www/NationalSecurity.nsf Department of Defence Information Security Page, Defence Signals Directorate www.dsd.gov.au/infosec/index.htm# Department of Defence Cyber Security Operations Centre, Defence Signals Directorate www.dsd.gov.au/infosec/csoc.htm Department of Finance and Administration www.fi nance.gov.au Department of Foreign Affairs and Trade www.dfat.gov.au National Archives of Australia www.naa.gov.au The Office of the Federal Privacy Commissioner www.privacy.gov.au OnSecure Online Security Resources and Incident Reporting System for Australian Government Agencies www.onsecure.gov.au Protective Security Coordination Centre http://www.ag.gov.au/www/agd/agd.nsf/ Page/Securitytraining_PSCCTrainingCentre China Information Technology Security Certification Center www.itsec.gov.cn/webportal/portal.po The Ministry of Industry and Information Technology of the People’s Republic of China www.mii.gov.cn The Ministry of Public Security of the People’s Republic of China www.mps.gov.cn National Information Security Standard Technical Committee (China) www.tc260.org.cn Standardization Administration of China www.sac.gov.cn State Council of the People’s Republic of China China Legislative Information Network System http://english.people.com.cn/data/organs/ statecouncil.shtml Digital 21 Strategy www.info.gov.hk/digital21 Hong Kong Monetary Authority www.info.gov.hk/hkma/index.htm The Independent Commission Against Corruption (ICAC) Corruption Prevention Department, Information Systems Security Checklist www.icac.org.hk Office of Government Chief Information Officer www.ogcio.gov.hk Security Bureau www.sb.gov.hk Security Bureau Hong Kong Police Force, Commercial Crime Bureau-Technology Crime Division www.info.gov.hk/police/hkp-home/english/tcd Government PKI Independent Administrative Agency National Institute of Advanced Industrial Science and Technology- SecureIT http://www.aist.go.jp/index_en.html ISSUE NUMBER 16 INFOSECURITY PROFESSIONAL 25
Page 1 and 2: ISSUE NUMBER 16 An (ISC) 2 Digital
Page 3 and 4: COVER PHOTO BY CHRISTOPHER J. MORRI
Page 5 and 6: executive letter from the deSk of (
Page 7 and 8: cloud security. can you see beyond
Page 9 and 10: eighth annual GISla recipients (ISC
Page 11 and 12: ISSUE NUMBER 16 INFOSECURITY PROFES
Page 13 and 14: Section 404 [of SoX], reporting com
Page 15 and 16: When was the last time your organiz
Page 17 and 18: Get recognized — our members do.
Page 19 and 20: she explains, ranging “from lack
Page 21 and 22: How to Set up Safe and Secure Onlin
Page 23 and 24: chapter passport MEMBERS CONNECT AN
Page 25: Korean Linux Documentation Project
Page 29 and 30: Communications and Networking www.i
Page 31 and 32: Slam the door on would-be attackers

The 2011 (ISC)2 Security Congress

Create successful ePaper yourself

Delete template?

Save as template?