RE: security audit

The one standard you want to looks at is Cobit 4.0
It is thorough and has excellent mapping to other frameworks.
check it out http://www.isaca.org
 
 
 
Nils Puhlmann, CISM, CISSP-ISSMP
Director Global IT & Security
Chief Privacy Officer
 
Mindjet Corporation 
 
125 E. Sir Francis Drake Blvd.
Larkspur, CA 94939, USA 
phone +1 (415) 925-3120 ext. 212
fax +1 (415) 925-3110 
www.mindjet.com <http://www.mindjet.com/> 
 


________________________________

        From: Andy Liu [mailto:Andy.Liu@selection.co.uk] 
        Sent: Tuesday, February 14, 2006 12:36 AM
        To: security-management@securityfocus.com
        Subject: security audit
        
        

        Hi guys,

         

        I'm working on project to evaluate security audit process. Is
there any standard or framework in this area that I can follow? Any
suggestion on security audit software, should security audit more
technical or more business-focused?

         

        Many thanks,

        Andy 

         


        -- 
        Please Visit our Website: http://www.selection.co.uk
<http://www.selection.co.uk/>  
        -- 
        This e-mail is confidential and is intended for the exclusive
use of the 
        addressee only. Selection Services Plc accepts no liability for
personal 
        views expressed. While every effort has been made to ensure the
attachments 
        are virus-free, they must be checked before further use,
especially those 
        containing encrypted data. If you have any problems with this
e-mail, 
        please contact our IT Manager on Email@Selection.co.uk 
        -- 
        This message has been scanned for viruses and 
        dangerous content by MailScanner <http://www.selection.co.uk/> ,
and is 
        believed to be clean.