Privacy & Security - Security

• Build Security In (DHS)
• Guidelines for Publishing Information Online (US-CERT)
• IT Security
• Why is Cyber Security a Problem? (US-CERT)

• Computer Emergency Readiness TeamCoordination Center (CERT)
• Computer Incident Advisory Capability (CIAC)
• Forum of Incident Response and Security Teams (FIRST)
• NIST Security Site
• SAFECode
• United States Computer Emergency Readiness Team (US-CERT)

NIST Work Groups

• Security Management and Assistance
• Security Technology
• Security Testing and Metrics
• Systems and Network Security

NIST Publications

• Draft Publications
• FIPS Publications
• ITL Security Bulletins
• NIST Interagency Reports
• Special Publications

• Choosing and Protecting Passwords
• Coordinating Virus and Spyware Defense
• Debunking Some Common Myths
• Good Security Habits
• Safeguarding Your Data
• Security Fix (Washington Post)
• Understanding Anti-Virus Software
• Understanding Internet Service Providers (ISPs) (US-CERT)
• Understanding Firewalls

• Common Vulnerabilities and Exposures List (CVE) - Search vulnerabilities by CVE name or browse the US-CERT list of vulnerabilities in CVE name order
• National Infrastructure Advisory Council's Vulnerability Disclosure Framework (.pdf)
• National Vulnerability Database (NVD) - Search U.S. government vulnerability resources for information about vulnerabilities on your systems
• Open Vulnerability Assessment Language (OVAL) - Identify vulnerabilities on your local systems using OVAL vulnerability definitions
• Open Web Application Security Project (OWASP)
• Secunia

• Center for Education and Research in Information Assurance and Security (CERIAS)
• Build Security In - Collection of software assurance and security information to help software developers, architects, and security practitioners create secure systems
• Creating and Managing Information Security Policies (SearchSecurity)
• Cyber Security Awareness Resources
• HIPAA Security Standards Guidance (hipaaadvisory.com)
• HIPAA Security Standards (HHS)
• Microsoft Security Vulnerability Research and Defense blog
• National Institute of Standards and Technology (NIST) - NIST offers Security Practices & Checklists as well as Special Publications.
• NIST Security Practices & Checklists
• NIST Special Publications
• Operationally Critical Threat and Vulnerability Evaluation (OCTAVE)
• SAFECode
• SecureMac
• Security Information Management Buyer's Guide (NetworkWorld)

• Preventing and Responding to Identity Theft
• Recovering from Viruses, Worms, and Trojan Horses
• Understanding Hidden Threats: Corrupted Software Files
• Understanding Hidden Threats: Rootkits and Botnets
• Understanding Denial-of-Service Attacks
• SenderBase (IronPort)

• Benefits of Blind Carbon Copy (BCC)
• Understanding Your Computer: Email Clients
• Using Caution with Email Attachments
• Understanding Digital Signatures

• Understanding Bluetooth Technology (US-CERT)
• Cybersecurity for Electronic Devices
• Defending Cell Phones and PDAs Against Attack
• Protecting Portable Devices: Physical Security
• Protecting Portable Devices: Data Security
• Securing Wireless Networks

• Department of Homeland Security PIA
• Basics of the Privacy Impact Assessment (ppt) - (Dept. of the Interior)
• Privacy Impact Assessment Handbook (Information Commission Office - UK)
• Privacy Impact Assessment Template (Word) - (Dept. of the Interior)
• Federal E-Government Act of 2002 (Office of Management and Budget)
• Census Bureau PIA
• Security Exchange Commissions PIA & template documents
• Veteran's Association PIA Handbook