Payment Cards Industry (PCS) DSS

• https://www.pcisecuritystandards.org/security_standards/pci_dss.shtml
• Payment Card Industry Data Security Standard Compliance Planning Guide

User Access

http://www.itgi.org/Images/journal/jrnlv4-07-common-ground-1.jpg

Frameworks and Architecture

http://www.redbooks.ibm.com/redpapers/pdfs/redp4528.pdf

Service Management ITIL

http://www.itlibrary.org/index.php
Free videos on ITIL : http://pmit.pl/en/it-management/free-itil-v3-course-collection-of-itil-v3-moviesdarmowe-szkolenie-itil-v3-zbior-filmikow-o-itil-v3/

Relevant Websites

http://www.fst.net.au/Index.aspx - Financial Services Technology Media
http://csrc.nist.gov/ - Computer Security Research Centre
http://www.darkreading.com/
http://www.banktech.com/
http://www.bankinfosecurity.com/
http://www.beastorbuddha.com/
http://risky.biz/
http://www.grc.com/securitynow.htm
http://www.thisweekintech.com/
http://itradio.com.au/?page_id=2
http://searchsecurity.techtarget.com.au/
http://www.ozprinciple.com/index.php
http://www.complianceandprivacy.com/
http://www.noticebored.com/
http://blogs.itworldcanada.com/security/
http://www.brighttalk.com/
http://risktech.financetech.com/
http://www.itbusinessedge.com/cm/blogs/defrangesco
http://www.ameinfo.com/corporate_it_security/ - Security in the EMEA region
http://www.databreaches.net/ - Office of Inadequate Security
http://www.govinfosecurity.com/ - Latest government information security news
http://www.net-security.org/ - Daily Security News site
http://www.securecomputing.net.au/
http://www.infosecisland.com/
https://cfo.executiveboard.com/public/ThirdPartyRiskManagementResourceCenter.aspx - Third Party Risk Management Resource Centre
www.burtongroup.com/guest/default.aspx - Free IT Research
http://csrc.nist.gov/publications/PubsFIPS.html/
https://www.isfsecuritystandard.com/SOGP07/index.htm/ - Standard of good practice for Information Security

Security Metrics

http://www.securitymetrics.org

"Security Metrics - Replacing Fear, Uncertainty, and Doubt" by Andrew Jaquith - Addison-Wesley.

http://www.youtube.com/watch?v=dFsbqGJ3qEY - Security Metrics: A Beginner's Guide 

Vulnerability Scanners

Nessus
GFI LanGuard
Qualys
Rapid 7 NeXpose
Catbird (service)
Acunetix Web Vulnerability Scanner (detects SQL Injection, XSS, etc.)
Secunia CSI (Corporate Software Inspector - informs about missing patches for thousands of third party programs on Windows platform)
Retina
Microsoft Baseline Security Analyzer
CoreImpact
ISS Internet Scanner
Saint
McAfee - Foundstone
nCircle - IP360
Saint Corp – Saint
Critical Watch - Fusion VM
NeXpose
System Scanner-Assuria

http://www.netiq.com/products/vsm/default.asp
http://www.scmagazineus.com/Best-policy-management-solution/article/130876/
http://www.outpost24.com

Governance Risk and Compliance Tools

http://www.moduloriskmanager.com/home.jsp
http://www.ca.com/au/products/subcategory.aspx?id=8019
http://www.sai-global.com/compliance/default.htm
http://www.brighttalk.com/channels/1044/view - Global Compliance Channel

Log Management

http://www.cloudsecurityalliance.org/guidance/csaguide.pdf
http://www.securitywarriorconsulting.com/security-incident-log-review-checklist.pdf

Cloud Computing Security

• http://www.cloudsecurityalliance.org/guidance/csaguide.pdf
• http://www.brighttalk.com/summit/cloudsecurity2