Resources cont’d

• Government

  • CERT
    • Operated by CMU under DoD contract, along with SEI
    • CERT teams exist at company, regional, agency, and national level
    • CERT issues advisories only for the most critical incidents...less-critical vulnerabilities posted on web page
    • www.cert.org
  • Federal Best Security Practices (BSPs)
    • Drill-down for useful checklists
    • bsp.cio.gov
  • NIST
    • Computer Security Resource Clearinghouse
    • csrc.nist.gov