About the Policy Chap 01: Intro to IT Security Policy Chap 02: Risk Analysis for Information System Chap 03: IT Security Management Chap 04: Access Control Security Chap 05: Personnel Security Chap 06: Physical & Environmental Security Chap 07: Network Management Chap 08: Operations ManagementChap 9: Incident Management Chap 10: System Development and
Maintenance Chap 11: Compliance CIS Benchmarks Secured Application Coding Guidelines CIS Benchmarks
The Center for Internet Security (CIS) is a non-profit enterprise whose mission is to help organizations reduce the risk of business and e-commerce disruptions resulting from inadequate technical security controls. The practical CIS Benchmarks support available high level standards that deal with the "Why, Who, When, and Where" aspects of IT security by detailing "How" to secure an ever widening array of workstations, servers, network devices, and software applications in terms of technology specific controls. CIS Benchmarks enumerate security configuration settings and actions that "harden" your systems. They are unique, not because the settings and actions are unknown to any security specialist, but because consensus among hundreds of security professionals worldwide has defined these particular configurations.
The CIS Benchmarks are available for download free of charge to the Internet community from the web site: http://www.cisecurity.org/.
Note: During the download, you will need to provide the Name, Email, Organization and Benchmark Package.