technology | by OCEG the Open Compliance and Ethics Group

Australia

DIRKS

United States, European Union

EU, Promoting data protection by privacy-enhancing technologies (PETS)

North America, United Kingdom

Mitratech

United Kingdom

Email archiving UK law, regulations and implications for business (2007)

United States

NIST, An Introductory Resource Guide For Implementing the Health Insurance Portability and Accountability (HIPAA) Security Rule (2008)

NIST, Information Security Handbook: A Guide for Managers (2006)

NIST, Performance Measurement Guide for Information Security (2008)

NIST, Guidelines on Electronic Mail Security (2007)

NIST, Computer Security Division, Computer Security Resource Center, Special Publications

2007 Review of Payroll Systems: Keeping Ownership of the Client Payroll Relationship (2007)

FDA, Computerized Systems Used In Clinical Investigations (2007)

ARTS Data Model Committee: Retail Data Model Scope (March 31, 2005 Release 5.0)

Governing for Enterprise Security Implementation Guide (GES)

FFIEC, IT Risk Management Process

NIST, Risk Management Framework

Architectural Risk Analysis (2005)

Assessing, Managing Enterprise Risk: What it takes to manage virtual servers (2007)

Convergence of Physical and Information Security in the Context of Enterprise Risk Management, The (2007)

NIST, Federal Information Security Management Act (FISMA) Implementation Project

Creating a Computer Security Incident Response Team: A Process for Getting Started (2002, Last Updated 2006)

Early Warning Signs of IT Project Failure: The Dominant Dozen (2006)

Alan Calder on IT Governance, information security and ISO 27001

Security Matters, Software Engineering Institute, Carnegie Mellon University

IT Sentinel (UK)

Federal Information Security Management Act of 2002

Government of Canada Publications: IT Security Guidance (ITSG)

Information Security Forum

IT Security Portal

NIST, ITL Security Bulletins

Solving the Compliance vs. Mobile Dilemma (2006)

Compliance Provides Benefits Beyond The Obvious (2007)

Portable security: Full-disk encryption can take a lot of risk out of mobile computing (2007)

Board Oversight of Information Technology - Data Privacy and Data Security: The New Imperative (2007)

Guide to NIST Information Security Documents

Understanding The World Of E-mail: How It Can Significantly Increase Or Decrease The Costs Of Electronic Discovery - Part I (2007)

Understanding The World Of E-mail: How It Can Significantly Increase Or Decrease The Costs Of Electronic Discovery - Part II (2007)

FAQ: Changes to the Federal Rules of Civil Procedure Affect Storage Plans (2007)

Examining E-Discovery Chain of Custody (2007)

Group creates standard to ease e-discovery data transfer (2007)

E-discovery product purchase considerations (2008)

Law Technology News

Court finalises e-discovery rules (2007)

Taking Control of Information: Managing Discovery (2007)

Disaster Recovery Planning for CIOs (2007)

Disaster recovery, backup, and restore: Big challenges for small businesses (2008)

How Vulnerable Is Your Information Technology? (2006)

Practical Disaster Recovery Planning: A Step-by-Step Guide

Survival of the Fittest: Disaster Recovery Design for the Data Center (2008)

State of IT Auditing in 2007, The

Compliance Without Tears: Preparation can ease IT's compliance concerns (2007)

Guide 6: Managing and Auditing IT Vulnerabilities (IIA, 2007)

GAIT Methodology, The (IIA, 2007)

NIST, Computer Security Incident Handling Guide (2008)

United States Computer Emergency Readiness Team (US-CERT)

OCEG Illustrated Series: # 6 How Can Automated Controls Help Identify And Manage Risk?

Six Steps to Better IT GRC (Treasury & Risk Magazine, June 2010)