Re: Standards Compliance Software or Guidlines?

Andre,

You list a combination of laws, government agencies and a security 
management standard, so I doubt you'll stumble upon a perfect solution. 
What exactly would you like the software to do? There are some simple 
electronic check lists for various compliance requirements (which you 
could easily make from a written document), but you probably won't find 
much freeware beyond that for a while.

Keep in mind that most of the good IT security standards contain roughly 
the same material. Chances are, any product built upon the ISO 17799 or 
CobiT standards, and designed to organize and manage your security 
program, will be comprehensive enough to cover the bulk of your needs. 
You'll have to pay for someone's hard work, but you get what you pay for 
(except for Linux).

- Rich
 



"Andre Derek Protas" <randori82@hotmail.com> 
10/25/2004 10:51 PM

To
<security-management@securityfocus.com>
cc

Subject
Standards Compliance Software or Guidlines?






I?m trying to find some good resources out there for some good compliance 
software or guidelines for the following audits:
Sarbanes-Oxley
FFIEC
HIPAA
ISO 17799
 
Anyone have any good suggestions?  Every website I?ve come across from 
googling is wanting money, and it?s nearly impossible to just get some 
good information on any of them with relation to an IT audit.
 
Thank you in advance,
 
Andre Derek Protas
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004