standards – CISO

Cyber security risks and cyber incidents.SEC Guidance

Division of Corporation Finance at Securities and Exchange Commission has released guidance on reporting the cyber security risks and cyber incidents. This has come after the realization of the SEC…

Binoy KL February 2, 2012

Risk Management

Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach.

NIST has recently released the final publication of the "Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach". This NIST special publication (NIST…

Binoy KL March 9, 2010

ISO 27001

Guide to ISO 31000

Three risk associations, Airmic, Alarm, and the IRM, have collaborated to publish a free guide to ISO 31000 titled "A structured approach to Enterprise Risk Management (ERM) and the requirements…

Binoy KL March 9, 2010

NIST

NIST Updates Automated Computer Security Validation Guidelines

The National Institute of Standards and Technology (NIST) has issued a draft publication for public comment that describes changes to the Security Content Automation Protocol (SCAP). SCAP is a suite…

Binoy KL December 17, 2009