Secure Coding Tools

http://www.fortify.com/security-resources/rats.jsp
http://www.dwheeler.com/flawfinder/
http://www.cigital.com/its4/download.php
http://www.securityfocus.com/infocus/1596

Penetration Test Tools

http://www.foundstone.com/us/resources/proddesc/hacmebank.htm
http://www.hackerevolution.org/
http://sectools.org/
http://nmap.org/
http://www.nessus.org/nessus/
http://www.metasploit.com/
http://oss.coresecurity.com/projects/pshtoolkit.htm
http://freeworld.thc.org/thc-hydra/
http://www.oxid.it/cain.html

Governance Surveys and Trends

PWC Information Security Survey - http://www.pwc.com/en_GX/gx/information-security-survey/pdf/pwcsurvey2010_report.pdf

Payment Cards Industry (PCS) DSS

• https://www.pcisecuritystandards.org/security_standards/pci_dss.shtml
• Payment Card Industry Data Security Standard Compliance Planning Guide

User Access

http://www.itgi.org/Images/journal/jrnlv4-07-common-ground-1.jpg

Frameworks and Architecture

http://www.redbooks.ibm.com/redpapers/pdfs/redp4528.pdf

Service Management ITIL

http://www.itlibrary.org/index.php
Free videos on ITIL : http://pmit.pl/en/it-management/free-itil-v3-course-collection-of-itil-v3-moviesdarmowe-szkolenie-itil-v3-zbior-filmikow-o-itil-v3/

Relevant Websites

http://www.fst.net.au/Index.aspx - Financial Services Technology Media
http://csrc.nist.gov/ - Computer Security Research Centre
http://www.darkreading.com/
http://www.banktech.com/
http://www.bankinfosecurity.com/
http://www.beastorbuddha.com/
http://risky.biz/
http://www.grc.com/securitynow.htm
http://www.thisweekintech.com/
http://itradio.com.au/?page_id=2
http://searchsecurity.techtarget.com.au/
http://www.ozprinciple.com/index.php
http://www.complianceandprivacy.com/
http://www.noticebored.com/
http://blogs.itworldcanada.com/security/
http://www.brighttalk.com/
http://risktech.financetech.com/
http://www.itbusinessedge.com/cm/blogs/defrangesco
http://www.ameinfo.com/corporate_it_security/ - Security in the EMEA region
http://www.databreaches.net/ - Office of Inadequate Security
http://www.govinfosecurity.com/ - Latest government information security news
http://www.net-security.org/ - Daily Security News site
http://www.securecomputing.net.au/
http://www.infosecisland.com/
https://cfo.executiveboard.com/public/ThirdPartyRiskManagementResourceCenter.aspx - Third Party Risk Management Resource Centre
www.burtongroup.com/guest/default.aspx - Free IT Research
http://csrc.nist.gov/publications/PubsFIPS.html/
https://www.isfsecuritystandard.com/SOGP07/index.htm/ - Standard of good practice for Information Security

Security Metrics

http://www.securitymetrics.org

"Security Metrics - Replacing Fear, Uncertainty, and Doubt" by Andrew Jaquith - Addison-Wesley.

http://www.youtube.com/watch?v=dFsbqGJ3qEY - Security Metrics: A Beginner's Guide 

Vulnerability Scanners

Nessus
GFI LanGuard
Qualys
Rapid 7 NeXpose
Catbird (service)
Acunetix Web Vulnerability Scanner (detects SQL Injection, XSS, etc.)
Secunia CSI (Corporate Software Inspector - informs about missing patches for thousands of third party programs on Windows platform)
Retina
Microsoft Baseline Security Analyzer
CoreImpact
ISS Internet Scanner
Saint
McAfee - Foundstone
nCircle - IP360
Saint Corp – Saint
Critical Watch - Fusion VM
NeXpose
System Scanner-Assuria

http://www.netiq.com/products/vsm/default.asp
http://www.scmagazineus.com/Best-policy-management-solution/article/130876/
http://www.outpost24.com