Resources

Reports and Surveys:

CSO Magazine's Research Reports

Information Security professionals will find a variety of in-depth reports, surveys and resources relevant to the state of information security, spending and more.

http://www.csoonline.com/csoresearch/index.cfm

The Security Management Index

The Security Management Index is a free survey that enables security professionals to benchmark their security management efforts based on global ISO 17799 standards. To ensure an accurate report, you should plan to take 30 minutes to an hour to complete this survey. After completion of the survey, you will get and immediate score and report that compares your security management practices with others in your industry and peer group.

https://www.humanfirewall.org/smiinfo/

Essays and Articles:

• What is Endpoint Security? PDF
• Security Breaches and the Cost of Downtime PDF

Links:

• Hoov's Musings, http://www.acuitive.com/musings/default.htm
• United States Computer Readiness Team, http://www.us-cert.gov/
• SSL VPN Central, http://www.sslvpncentral.com
• Trusted Computing, https://www.trustedcomputinggroup.org/home
• CSO online, http://www.csoonline.com
• Information Security, http://infosecuritymag.techtarget.com/
• CMP Security Pipeline, http://nwc.securitypipeline.com/
• Spire Security, http://www.spiresecurity.com/

Related Forums

myITforum

myITforum.com is the premier online destination for IT professionals responsible for managing their corporations' Microsoft Windows systems. The centerpiece of myITforum.com is a collection of member forums where IT professionals actively exchange technical tips, share their expertise, and download utilities that help them better manage and secure their Windows environments.

http://myitforum.techtarget.com/

PatchManagement.org

PatchManagement.org is dedicated to the discussion of patch management. This list discusses the how-to's and why's of security patch management across a broad spectrum of Operating Systems, Applications, and Network Devices. This list is meant as an aid to network and systems administrators and security professionals who are responsible for maintaining the security posture of their hosts and applications.

http://www.patchmanagement.org

Training and Education:

iP3 Seminars

IT Security Workshop 2005, Strategy to Reality Executive Forum - Implementing a Policy-Centric IT Security ARchitecture. http://www.ip3seminars.com/index2.php

SSL VPN Central

SSL VPN Central is the only independent information portal dedicated to educating organizations on the security requirements, solutions and issues surrounding SSL-based, extended networks. Through its self-service approach to learning and its unique advisory, analytical, and information services the Breakaway Security Group helps organizations build and operate mission-critical networks. http://www.sslvpncentral.com

Security University

Single source for hands-on computer security training for executives and security professionals. http://www.securityuniversity.net

Associations:

ISSA - Information Systems Security Association

The primary goal of the ISSA is to promote management practices that will ensure the confidentiality, integrity and availability of information resources. http://www.issa.org/

CISecurity - The Center for Internet Security

CIS provides methods and tools to improve, measure, monitor, and compare the security status of your Internet-connected systems and appliances, plus those of your business partners. http://www.cisecurity.org/