Risk Management Reference Materials

Risk Mitigation: Personal Computers & Devices

| Prevention | Detection | Correction & Recovery |

Information technologies, notably digital networks, are mission critical resources for both public and private sector organizations. Since network resources have vulnerabilities that can be exploited and perpetrators who present a threat by trying to exploit the vulnerabilities, it is incumbent upon management to properly manage the risks. Generally the risk management strategy involves some combination of accepting, sharing, or mitigating the risks. The later usually involves some combination of prevention, detection, and correction/recovery strategies.

Prevention

• Answers That Work, see the free Library of Answers, notably the Task List

• Home Computer Security, from CERT

• Start-Up Applications, Do You Need All Of Them?, useful resource by Paul Collins

• Windows 2000 Security Hardening Guide

• Practical Privacy Tools, from the Electronic Privacy Information Center

Detection

• Intrusion & Attack Reporting Center, reports, removal tools, and techniques at Doshelp.com

Correction & Recovery

• Removing Spyware, a brief article with reviews of current applications