Re: US-CCU Cyber-Security Check List 2007

["Saqib Ali" <docbook.xml () gmail com>]

Disclaimer: Although the name and promotional material of this
organization (US-CCU) seems to imply governmental affiliation, it is
actually private contractors drafting what they think the  questions
ought to be. Most such private lists are never widely adopted. (SANS
NewsBites - Volume: VIII, Issue: 34)

And as far as I know this checklist has received NO DHS approval etc....

saqib
http://www.full-disk-encryption.net


On 11/22/06, lists () virtualcso com <lists () virtualcso com> wrote:
> This checklist is well written and worth adding to your audit toolkit.
> US-CCU considers attack vectors and layers on appropriate controls.
>
> http://www.ussecurityawareness.org/docs/US-CCU%20Cyber-Security%20Check%20Li
> st%202007.pdf
>
> "This check list is intended as a comprehensive survey of the steps that
> corporations and other organizations should take to reduce their
> vulnerability to cyber-attacks".
>
> Kind regards,
>
> Gideon
>
> Gideon T. Rasmussen
> CISSP, CISA, CISM, IAM
> Charlotte, NC
> http://www.virtualcso.com
>
> http://www.ussecurityawareness.org
> http://groups.yahoo.com/group/gideons-infosec-list
> http://groups.yahoo.com/group/insider-threat
> http://groups.yahoo.com/group/security-awareness
>
>
> --------------------------------------------------------------------
> mail2web - Check your email from the web at
> http://mail2web.com/ .


--
Saqib Ali, CISSP, ISSAP
http://www.full-disk-encryption.net