IT | by OCEG the Open Compliance and Ethics Group

United Kingdom

Email archiving UK law, regulations and implications for business (2007)

United States

NIST, An Introductory Resource Guide For Implementing the Health Insurance Portability and Accountability (HIPAA) Security Rule (2008)

NIST, Information Security Handbook: A Guide for Managers (2006)

NIST, Performance Measurement Guide for Information Security (2008)

NIST, Guidelines on Electronic Mail Security (2007)

NIST, Computer Security Division, Computer Security Resource Center, Special Publications

Governing for Enterprise Security Implementation Guide (GES)

FFIEC, IT Risk Management Process

NIST, Risk Management Framework

Architectural Risk Analysis (2005)

Assessing, Managing Enterprise Risk: What it takes to manage virtual servers (2007)

Convergence of Physical and Information Security in the Context of Enterprise Risk Management, The (2007)

NIST, Federal Information Security Management Act (FISMA) Implementation Project

Creating a Computer Security Incident Response Team: A Process for Getting Started (2002, Last Updated 2006)

Alan Calder on IT Governance, information security and ISO 27001

Security Matters, Software Engineering Institute, Carnegie Mellon University

IT Sentinel (UK)

Federal Information Security Management Act of 2002

Government of Canada Publications: IT Security Guidance (ITSG)

Information Security Forum

ISO Catalog Page: Information technology

IT Security Portal

NIST, ITL Security Bulletins

Compliance Provides Benefits Beyond The Obvious (2007)

Portable security: Full-disk encryption can take a lot of risk out of mobile computing (2007)

Guide to NIST Information Security Documents

FAQ: Changes to the Federal Rules of Civil Procedure Affect Storage Plans (2007)

Examining E-Discovery Chain of Custody (2007)

Group creates standard to ease e-discovery data transfer (2007)

E-discovery product purchase considerations (2008)

Law Technology News

Disaster Recovery Planning for CIOs (2007)

Disaster recovery, backup, and restore: Big challenges for small businesses (2008)

Managing risk in the information age (2007)

Practical Disaster Recovery Planning: A Step-by-Step Guide

Survival of the Fittest: Disaster Recovery Design for the Data Center (2008)

Chief Information Officers Council (CIO)

State of IT Auditing in 2007, The

Compliance Without Tears: Preparation can ease IT's compliance concerns (2007)

Guide 6: Managing and Auditing IT Vulnerabilities (IIA, 2007)

GAIT Methodology, The (IIA, 2007)

NIST, Computer Security Incident Handling Guide (2008)