Resources - NIST, Cyber Law, Benchmarking

[Krizi Trivisani <krizi () GWU EDU>]

Hello,

I have received several emails and phone calls regarding NIST, Cyber
Laws, and security benchmarking so I thought I'd share a couple of
resources.  I hope you find them helpful.

Link to NIST's Security Assessment Framework
http://csrc.nist.gov/organizations/guidance/framework-final.pdf

Training - Understanding Cyber Crime - a one day class that I found very
helpful in obtaining a better grasp of the laws that impact security and
how you design your incident response program.  I attached a more
detailed copy of what the class covers.  Contact Steve Surdu,
Foundstone, 202-756-1338 steve.surdu () foundstone com if you would like
more information.

Benchmarking
The Humanfirewall Council offers two FREE tools that allow you to
benchmark security awareness and security management practices.  A good
way to find out where you are today and in a year from now allows you to
find out how much progress you have made.  If enough Universities
participate in the benchmark surveys, we can find out where higher
education stands as a whole regarding security.  The link is:
http://www.humanfirewall.org/

Regards,
Krizi

*******************************
Krizi Trivisani, CISSP
Chief Security Officer
The George Washington University
202/994-7803
krizi () gwu edu







**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/memdir/cg/.

Attachment: Understanding_Cyber_Crime_Class1.doc
Description: