Category: Security

PUBLIC REVIEW: SANS Consensus Audit Guidelines

February 23rd, 2009
The SANS Institute today released for comment the "Consensus Audit Guidelines"(CAG). From the press release: [The purpose of the CAG] is to define the most critical security controls to protect federal and contractor information and information syst… more »

TOP 25 Most Dangerous Programming Errors

February 9th, 2009
Last week, the CWE and SANS published a list of the top 25 most dangerous programming errors. Good stuff ... take a look. In case you don't know, the Common Weakness Enumeration (CWE) is a Software Assurance strategic initiative sponsored by the… more »

ISO 27000 Certification - Anyone?

November 25th, 2008
Does anyone have any experience with ISO 27000 Certification? We're pursuing it at work and I can't find any good resources. Anyone know of any? Thanks! more »