IT | by OCEG the Open Compliance and Ethics Group

OCEG Contributed

OCEG GRC Taxonomy Working Group monthly meeting

OCEG GRC-XML Working Group Monthly Meeting

Q1 2008 Technology Council Roundtable

OCEG GRC Blueprint Working Group monthly meeting

OCEG to Keynote ACL Connections 2008 User Conference

FAQ: Changes to the Federal Rules of Civil Procedure Affect Storage Plans (2007)

GAIT Methodology, The (IIA, 2007)

IT Governance Defined

OCEG CRITICAL CONVERSATIONS SERIES: CIO AT THE CENTER -Executive Summary

State of IT Auditing in 2007, The

Compliance Provides Benefits Beyond The Obvious (2007)

Compliance Without Tears: Preparation can ease IT's compliance concerns (2007)

Portable security: Full-disk encryption can take a lot of risk out of mobile computing (2007)

Examining E-Discovery Chain of Custody (2007)

Group creates standard to ease e-discovery data transfer (2007)

Disaster Recovery Planning for CIOs (2007)

Creating a Computer Security Incident Response Team: A Process for Getting Started (2002, Last Updated 2006)

OCEG GRC Blueprint Project Overview

Q4 2007 Technology Council Roundtable

Assessing, Managing Enterprise Risk: What it takes to manage virtual servers (2007)

Disaster recovery, backup, and restore: Big challenges for small businesses (2008)

Guide to NIST Information Security Documents

NIST, ITL Security Bulletins

Government of Canada Publications: IT Security Guidance (ITSG)

Information Security Forum

ISO Catalog Page: Information technology

NIST, Federal Information Security Management Act (FISMA) Implementation Project

Federal Information Security Management Act of 2002

Security Matters, Software Engineering Institute, Carnegie Mellon University

Survival of the Fittest: Disaster Recovery Design for the Data Center (2008)

Practical Disaster Recovery Planning: A Step-by-Step Guide

Red Book/GRC Ecosystem Functional Category Alignment - V 1.1

IT Sentinel (UK)

Q1 2008 OCEG Technology Council Roundtable

2008 Technology Council Update

GRC Technologies Glossary

GRC-XML Work Group Monthly Meeting

OCEG Intellectual Property Agreement

IT Governance Institute's VAL IT Model Overview

GRC Roadmap<sup>TM</sup> Program Overview

GRC-XML Work Group Overview - June 6, 2008

ITGI's VAL IT Framework

ISM3 Model V 2.0

ISM3 Model V2.1 Overview

GRC Blueprint Work Group Meeting - July 31, 2008

GRC Illustrated Series: #16 How Do We Integrate IT to Enable GRC?

CIO's Guide to Mobile Security, The (2008)

IT Governance Standard, ISO/IEC 38500:2008 Order Page (2008)

NIST, An Introductory Resource Guide For Implementing the Health Insurance Portability and Accountability (HIPAA) Security Rule (2008)

NIST, Information Security Handbook: A Guide for Managers (2006)

NIST, Computer Security Incident Handling Guide (2008)

NIST, Performance Measurement Guide for Information Security (2008)

NIST, Guidelines on Electronic Mail Security (2007)

NIST, Computer Security Division, Computer Security Resource Center, Special Publications

SANS' Information Security Reading Room

Tools for Defense In-Depth: SANS What Works

Email archiving UK law, regulations and implications for business (2007)

GAIT for Business and IT Risk (GAIT-R) (The IIA, 2008)

ISACA IS Standards, Guidelines and Procedures for Auditing and Control Professionals

BWise Joins the Open Compliance & Ethics Group's Technology Council

Brabeion Software Joins the Open Compliance and Ethics Group's Technology Council

Ramco Becomes the Latest Global Organization to Join the OCEG Technology Council

MENTISoftware Becomes the Latest Member of the OCEG Technology Council

CA Joins OCEG as the Newest Member of the Leadership Council

MetricStream Joins OCEG as the Newest Charter Member

OCEG GRC Blueprint Draft - V 0.4

GRC Technology Solutions Guide v. 2.1

OCEG for Technology

E-discovery product purchase considerations (2008)

GRC Taxonomy Working Group Materials

GRC-XML Working Group Materials

GRC Blueprint and Roadmap Working Group Materials

GRC-XML Working Group Meeting #2 - February 13, 2008

Glossary of GRC Terms from Financial Services Provider Perspective

Law Technology News

Glossary of Terms from Compliance Spectrum

OCEG GRC Glossary - Draft 02-25-08

GRC Blueprint: February 2008 Working Group Meeting

GRC Ecosystem - February 2008 Draft from Corporate Integrity

GRC Ecosystem Components List - February 2008 Draft from Corporate Integrity

TechRepublic's 2008 IT skills and salary report

Compliance Spectrum Announces OCEG Technology Council Membership

Audit Software Provider ACL Services Joins Open Compliance & Ethics Group Technology Council

Paisley Joins the Open Compliance & Ethics Group Technology Council

Technology Council LIVE! Annual Meeting

GRC Forum Report - Proving the Value of IT for GRC

Member Contributed

Chief Information Officers Council (CIO)

FFIEC, IT Risk Management Process

GRC Illustrated Series: #3 IT Roadmap For GRC

Christiansen's IT Law: Information Law Theory and Practice

Computer Ethics

Alan Calder on IT Governance, information security and ISO 27001

Data Auditing Blog

Architectural Risk Analysis (2005)

IT Security Portal

Convergence of Physical and Information Security in the Context of Enterprise Risk Management, The (2007)

IT Toolbox Blog Page

Compliance and Security Connection

An Introduction to IT Governance (Paisley, 2006)

Managing risk in the information age (2007)

DHS, IT Security Essential Body of Knowledge (EBK): A Competency and Functional Framework for IT Security Workforce Development (2008)

NIST, Risk Management Framework

Governing for Enterprise Security Implementation Guide (GES)

Guide 6: Managing and Auditing IT Vulnerabilities (IIA, 2007)

GRC Solutions Council