User:Enabled37/Books/Some-InfoSec-Stuff

Some InfoSec Stuff

 * Information security
 * Information security management


 * Standards
 * BS 7799
 * BS 25999
 * ISO 9000
 * ISO/IEC 20000
 * ISO/IEC 27001
 * ISO/IEC 27002
 * Payment Card Industry Data Security Standard
 * Information Technology Infrastructure Library
 * Sarbanes–Oxley Act
 * PRINCE2
 * COBIT
 * SOX 404 top–down risk assessment
 * Statement on Auditing Standards No. 70: Service Organizations
 * Common Criteria
 * Committee of Sponsoring Organizations of the Treadway Commission


 * Certifications
 * (ISC)²
 * Certified Information Systems Security Professional
 * ISACA
 * Certified Information Systems Auditor
 * Certified Information Security Manager


 * Measurements
 * Physical security
 * Internet Security Awareness Training
 * Security awareness
 * Security controls
 * Security management
 * Data loss prevention software
 * Classified information
 * Strong authentication
 * Multi-factor authentication
 * Access control
 * Audit
 * Audit trail
 * Separation of duties
 * Malware
 * Network monitoring
 * System monitoring
 * Internal control