Educause Security Discussion mailing list archives

Re: Security Program: NIST, ISO, other?


From: Valdis Kletnieks <Valdis.Kletnieks () VT EDU>
Date: Fri, 18 Jan 2013 14:10:17 -0500

On Thu, 17 Jan 2013 15:05:12 +0000, "Edgmand, Craig" said:
Not to plug SANS here, as I have no affiliation with them, has anybody thought about using the SANS 20 Critical 
Controls?

I know Virginia Tech is implementing these as their guidelines and they map
 out to the various NIST SP800-53 controls.

I blame Randy's ponytail for that. It makes him do crazy things like
become allergic to big heavy policy documents. :)

Attachment: _bin
Description:


Current thread: