Payment Cards Industry (PCS) DSS

PCI Security Standards Council
Free PCI DSS Compliance Planning Guide from Microsoft

User Access

http://www.itgi.org/Images/journal/jrnlv4-07-common-ground-1.jpg

Frameworks and Architecture

http://www.redbooks.ibm.com/redpapers/pdfs/redp4528.pdf

Service Management ITIL

http://www.itlibrary.org/index.php
http://pmit.pl/en/it-management/free-itil-v3-course-collection-of-itil-v3-moviesdarmowe-szkolenie-itil-v3-zbior-filmikow-o-itil-v3/ - free videos on ITIL

Relevant Websites

http://csrc.nist.gov/ – Computer Security Research Centre
http://www.darkreading.com/
http://www.banktech.com/
http://www.bankinfosecurity.com/
http://www.beastorbuddha.com/
http://risky.biz/
http://www.grc.com/securitynow.htm
http://www.thisweekintech.com/
http://itradio.com.au/?page_id=2
http://searchsecurity.techtarget.com.au/
http://www.ozprinciple.com/index.php
http://www.complianceandprivacy.com/
http://www.noticebored.com/
http://blogs.itworldcanada.com/security/
http://www.brighttalk.com/
http://risktech.financetech.com/
http://www.itbusinessedge.com/cm/blogs/defrangesco
http://www.ameinfo.com/corporate_it_security/ – Security in the EMEA region
http://www.databreaches.net/ – Office of Inadequate Security

Security Metrics

http://www.securitymetrics.org

“Security Metrics – Replacing Fear, Uncertainty, and Doubt” by Andrew Jaquith – Addison-Wesley.

Vulnerability Scanners

1. Nessus
2. GFI LanGuard
3. Qualys
4. Rapid 7 NeXpose
5. Catbird (service)
6. Acunetix Web Vulnerability Scanner (detects SQL Injection, XSS, etc.)
7. Secunia CSI (Corporate Software Inspector – informs about missing patches for thousands of third party programs on Windows platform)
8. Retina
9. Microsoft Baseline Security Analyzer
10. CoreImpact
11. ISS Internet Scanner
12. Saint
13. McAfee – Foundstone
14. nCircle – IP360
15. Saint Corp – Saint
16. Critical Watch – Fusion VM
17. NeXpose
18. System Scanner-Assuria

• http://www.netiq.com/products/vsm/default.asp
• http://www.scmagazineus.com/Best-policy-management-solution/article/130876/
• http://www.outpost24.com

Governance Risk and Compliance Tools

http://www.moduloriskmanager.com/home.jsp

http://www.ca.com/au/products/subcategory.aspx?id=8019

http://www.sai-global.com/compliance/default.htm
http://www.brighttalk.com/channels/1044/view – Global Compliance Channel

Log Management

http://www.cloudsecurityalliance.org/guidance/csaguide.pdf

Cloud Computing Security

• http://www.cloudsecurityalliance.org/guidance/csaguide.pdf
• http://www.brighttalk.com/summit/cloudsecurity2