References & Links

IT Standards & References

• Computer Security Resource Center (CSRC) - This site contains announcements, current legislative information related to IT security.
  
  

• American National Standards Institute (ANSI) - A private, non-profit organization that administers and coordinates the U.S. voluntary standardization and conformity assessment system. 
  
  

• Generally Accepted Systems Security Principles (GASSP) - A white paper by the National Institite of Standards and Technology (U.S. Department of Commerce). 
  
  

• National Institute of Standards and Technology (NIST) - A site to access reference material, standards information and articles from a variety of NIST publications. 
  
  

• IT Infrastructure Library (ITIL) - A consistent and comprehensive resource for documentation of best practices for IT Service Management. 
  
  

• IT White Papers - A great reference site for technology research. 

IT Audit Training

• SANS Institute - Computer Security Education and Information Security Training  
   

• MIS Training Institute - Technology Audit and Information Security Training  
   

• Computer Security Institute - Computer Security Training  

IT Audit Sites

• Audit Net - A resource for technology audit programs, checklists, and other internal audit tools.
  
  

• IT Audit - A site provided by the Institute of Internal Audit. Various technology-related audit resources can be found here.

Organizations

• ISACA - Information Systems Audit & Control Association. 
  
  

• IIA - Institute of Internal Audit. 
  
  

• (ISC)2 - International Information Systems Security Certification Consortium. 
  
  

• ISSA - Information Systems Security Association. 
  
  

• DRII - Disaster Recovery Institute.
  
  

• ACFE - Association of Certified Fraud Examiners.

Computer Security

• Purdue CERIAS Project - Formerly COAST, now Center for Education and Research in Information Assurance and Security. 
  
  

• NIST Computer Security Resource Clearinghouse - National Institute of Standards and Technology. 
  
  

• CERT - Computer Emergency Response Team. Excellent source for security advisories and Internet incident statistics. 
  
  

• Anonymity and privacy on the Internet - Learn how to be anonymous, and how to secure your communications and files from third parties. 
  
  

• Unix System Security Checklist - An excellent UNIX security checklist. 
  

• Microsoft TechNet Security Tools - Excellent Windows security and administration information. 

Useful Sites

• List of FAQ's
  
  

• CIAC's Security Tools
  
  

• Computer & Communication Standards
  
  

• The Hacker Quarterly
  
  

• Firewalls FAQ
  
  

• SEI Home
  
  

• Virus FAQ's
  
  

• Insecure.org - Top 100 Network Security Tools