Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security CISSP-Discussion
[Top] [All Lists]

[CISSP-D] IT Resilience; Pro-Active Analysis (e.g. FMEA); & Governance r

Subject: [CISSP-D] IT Resilience; Pro-Active Analysis (e.g. FMEA); & Governance resources
Date: Thu, 6 Jul 2006 05:10:24 -0700 (PDT)
  "If you are going to achieve excellence in big things, you develop 
  the habit in little matters. Excellence is not an exception, it is a 
prevailing attitude". -- Colin Powell.

  ____________________________________________________
   
  1. IT resilience and Disaster Recovery
   
  www.noticebored.com
   
  Keeping business- and safety-critical computer systems running smoothly is a 
vital part of the IT Departments job. Julys NoticeBored Classic security 
awareness module covers the resilience and Disaster Recovery measures necessary 
to keep the lights on in IT despite power cuts, floods, fires, configuration 
errors, accidents, bugs etc., and to turn the lights back on after major 
incidents. Find out some tricks of the trade from NoticeBored and help 
employees understand what goes into delivering reliable IT services.

Kind regards,
Gary Hinson
CEO, IsecT Ltd.

   
  2. The mission of Directors & Boards is to help management and the board have 
the most productive relationship possible -- so that great value is created for 
the company and its shareholders. We do that by publishing the most expert, 
thoughtful, and well-written advisories on every aspect of the role of the 
board. 
   
  http://www.directorsandboards.com/index.html
   
  3. The McKinsey Quarterly Top Ten Newsletter Second Quarter 2006
   
  http://www.mckinseyquarterly.com/newsletters/topten/2006_Q2.htm
   
  4. Making the Case for FMEA.    
  http://www.isixsigma.com/tt/fmea/

5. Making the Case for FMEA in Managing Software Projects.

http://www.isixsigma.com/library/content/c060515a.asp

A well-documented failure mode and effects analysis (FMEA) with robust action 
  plans and implementation can help an organization avoid rework in software 
  projects. FMEA can isolate weak steps, where things may go wrong and where 
  to focus improvements.  
   
  This article discusses the following topics:
  
- How to Use FMEA in Software Projects 
- When to Use FMEA 
- Specific Benefits of FMEA

The benefits a software project team will gain from this powerful technique are 
well worth the time invested in applying it

   
  6. Look inside The BoardAgenda - from EDGEvantage

  July 2006

    
---------------------------------
  
  
Download the free headline summary to find out more...
http://www.boardagenda.com/headlines.pdf
   
  Or subscribe and get full access to all the stories, and links to source 
documents http://www.boardagenda.com/subscribe 
    
---------------------------------
     
  7. Why Managing by Facts Works

   
  by Jeffrey Pfeffer and Robert I. Sutton 
   
  Stanford, Calif., June 29, 2006 -- Using hard facts, such as qualitative or 
quantitative data, to make strategic decisions is the clearest path to the best 
business choices. Yet many executives ignore the facts and make "gut" decisions 
based on fads or hunches. Although there's great value in keen intuition and 
fresh ideas, evidence-based management leads to competitive advantage.
   
  To read the full analysis:
http://www.strategy-business.com/enewsarticle/enews062906
   
  8. PREPARING FOR AUDITORS: CHECKLISTS FOR BEFORE, 
  DURING AND AFTER AN IT AUDIT 
   
  With adequate planning, IT and security managers can help ensure
their organizations receive a quality audit. Use these checklists
from "Information Technology Control and Audit," by Frederick
Gallegos, to prepare for each stage of the auditing process. 

  http://go.techtarget.com/r/335173/4842737

   
  9. Auerbach Publications 
   
  http://www.auerbach-publications.com/home.asp
   
  10. Chapter 2, Audit and Review: Its Role in Information Technology, 
  from Information Technology Control and Audit, Second Edition.
   
  
http://searchsecurity.techtarget.com/searchSecurity/downloads/Gallegos_AU2032_C02_fm.pdf
   
  11. Getting to Know ITIL - a very informative article about this important 
subject.
   
  http://www.theiia.org/itaudit/index.cfm?iid=467&catid=21&aid=2217
   
  12. Auditor Answers: Software for Expediting Regulatory Audits

  http://www.itcinstitute.com/display.aspx?id=1953
   
  Enjoy,
   
  Dan
  __________________________________________________
   
    www.securitybenchmark.com
  http://finance.groups.yahoo.com/group/Dans_SECemails/
http://finance.groups.yahoo.com/group/Dans_CCCemails/
   
    Twenty Questions for Directors to Ask Internal Auditors 
  The IIA has a briefing paper to help audit committees 
  develop a better understanding of expectations.
  
www.complianceweek.com/index.cfm?fuseactionfiltered=article.viewArticle&article_ID=2530

   
  The Open Compliance and Ethics Group (OCEG) has issued a 88 page internal 
audit 
  guide for use in auditing compliance and ethics programs. For a free download 
go to.
  www.oceg.org/landing/IAG.aspx
  _________________________________________________________________


                
---------------------------------
Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ 
countries) for 2"/min or less.
<Prev in Thread] Current Thread [Next in Thread>
  • [CISSP-D] IT Resilience; Pro-Active Analysis (e.g. FMEA); & Governance resources, Dan Swanson <=