Risk Assessment Related Docs

Risk Management Guide for Information Technology Systems http://csrc.nist.gov/publications/nistpubs/800-30/sp800-30.pdf

INTERNET BANKING AND TECHNOLOGY RISK MANAGEMENT GUIDELINES : http://www.mas.gov.sg/resource/legislation_guidelines/risk_mgt/IBTRMV3.pdf

IT Sector Baseline Risk Assessment - http://www.dhs.gov/xlibrary/assets/nipp_it_baseline_risk_assessment.pdf

IT Governance Models & Good Practice Frameworks http://www.thebci.org/reports/IanInglis.pdf

Information Classification http://www.im.gov.ab.ca/publications/pdf/InfoSecurityClassification.pdf

http://www.im.gov.ab.ca/publications/pdf/InfoSecurityClassification.pdf

Secure Coding Tools

http://www.fortify.com/security-resources/rats.jsp
http://www.dwheeler.com/flawfinder/
http://www.cigital.com/its4/download.php
http://www.securityfocus.com/infocus/1596

Penetration Test Tools

http://www.foundstone.com/us/resources/proddesc/hacmebank.htm
http://www.hackerevolution.org/
http://sectools.org/
http://nmap.org/
http://www.nessus.org/nessus/
http://www.metasploit.com/
http://oss.coresecurity.com/projects/pshtoolkit.htm
http://freeworld.thc.org/thc-hydra/
http://www.oxid.it/cain.html

Governance Surveys and Trends

PWC Information Security Survey - http://www.pwc.com/en_GX/gx/information-security-survey/pdf/pwcsurvey2010_report.pdf

Payment Cards Industry (PCS) DSS

• https://www.pcisecuritystandards.org/security_standards/pci_dss.shtml
• Payment Card Industry Data Security Standard Compliance Planning Guide

User Access

http://www.itgi.org/Images/journal/jrnlv4-07-common-ground-1.jpg

Frameworks and Architecture

http://www.redbooks.ibm.com/redpapers/pdfs/redp4528.pdf

Service Management ITIL

http://www.itlibrary.org/index.php
Free videos on ITIL : http://pmit.pl/en/it-management/free-itil-v3-course-collection-of-itil-v3-moviesdarmowe-szkolenie-itil-v3-zbior-filmikow-o-itil-v3/

Relevant Websites

http://www.fst.net.au/Index.aspx - Financial Services Technology Media
http://csrc.nist.gov/ - Computer Security Research Centre
http://www.darkreading.com/
http://www.banktech.com/
http://www.bankinfosecurity.com/
http://www.beastorbuddha.com/
http://risky.biz/
http://www.grc.com/securitynow.htm
http://www.thisweekintech.com/
http://itradio.com.au/?page_id=2
http://searchsecurity.techtarget.com.au/
http://www.ozprinciple.com/index.php
http://www.complianceandprivacy.com/
http://www.noticebored.com/
http://blogs.itworldcanada.com/security/
http://www.brighttalk.com/
http://risktech.financetech.com/
http://www.itbusinessedge.com/cm/blogs/defrangesco
http://www.ameinfo.com/corporate_it_security/ - Security in the EMEA region
http://www.databreaches.net/ - Office of Inadequate Security
http://www.govinfosecurity.com/ - Latest government information security news
http://www.net-security.org/ - Daily Security News site
http://www.securecomputing.net.au/
http://www.infosecisland.com/
https://cfo.executiveboard.com/public/ThirdPartyRiskManagementResourceCenter.aspx - Third Party Risk Management Resource Centre
www.burtongroup.com/guest/default.aspx - Free IT Research
http://csrc.nist.gov/publications/PubsFIPS.html/
https://www.isfsecuritystandard.com/SOGP07/index.htm/ - Standard of good practice for Information Security