Industry

  • American Institute of Certified Public Accountants SysTrust requirements— www.aicpa.org

  • Information Systems Security Association (ISSA)— Generally Accepted Information Security Principles (GAISP)—www.issa.org/gaisp.html

  • Information Systems Audit and Control Association (ISACA) Control Objectives for Information and Related Technology (COBIT) requirements— www.isaca.org

  • Center for Internet Security benchmarks for secure configurations— www.cisecurity.org

  • SANs Top Twenty Internet security threats— www.sans.org/top20.htm

  • Internet Engineering Task Force (IETF) Site Security Handbook (RFC 2196)— www.ietf.org

Get Executive Guide to Information Security, The: Threats, Challenges, and Solutions now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.