Risk Management Reference Materials

| General References | Policies, Procedures, & Practices | Risk Assessment | Risk Mitigation |
| Security Tools | Vendors |

1. Information Systems- the source of the vulnerabilities that can be exploited

2. Cyber Crimes- the threats created by those who want to exploit the vulnerabilities

3. Risk Management- the strategies and tactics used by an organization to manage the risks created by the combination of vulnerabilities and threats

4. Incident Investigations- the "response" mode in the risk management strategy in which investigations are conducted and prosecution is pursued.

Information technologies, notably digital networks, are mission critical resources for both public and private sector organizations. Since network resources have vulnerabilities that can be exploited and perpetrators who present a threat by trying to exploit the vulnerabilities, it is incumbent upon management to properly manage the risks. Generally the risk management strategy involves some combination of accepting, sharing, or mitigating the risks. The later usually involves some combination of prevention, detection, and correction/recovery strategies.

General References

• AstalaVista.net- Advanced Security Member Portal, membership required

• Institute for Security Technology Studies- Darmouth College

• Internet Guide to Popular Resources on Information Security- by SANS

• Packet Storm Security- news and tools

• Parallax Research Group- more news and tools

• SearchSecurity.com- security information and resources

Policies, Procedures, and Practices

• The Security Policy Project- SANS

• Company Checklist- Interpol

Risk Assessment

Risk Mitigation- Prevention, Detection, Correction/Recovery

• Personal Computers & Devices- additional links from this web site

• Networks- additional links from this web site

Security Tools

• PC Flank, an impressive list of resources to help lockdown computers

Vendors (source of products and informative whitepapers)

• Internet Security Systems, informative whitepapers under customer support