The papers listed here are vendor agnostic, even though some contain product functionality only to drive home a point. These documents are for use for personal, staff, or classroom training as long as the paper’s source is retained.
- Business Continuity Event Planning (2008/2009)
- Series on building and managing an Information Security Awareness Training Program (2008)
- Business Continuity Planning Series (2008)
- Incident Management Series (2008)
- Series on use of free Sysinternals utilities for security management and testing (2008)
- Prepare for e-discovery requests: How to avoid disastrous legal sanctions and fines (September 9, 2008)
- Evaluation of TrueCrypt as a Mobile Data Encryption Solution (April 19, 2008) (PDF) (MobiPocket)
- Keystroke Logging (April 4, 2008)
- A Practical Approach to Management Information System Risk (February 2, 2008)
- Improve Data Protection Processes with Content Discovery, Monitoring, and Filtering (November 7, 2008)
- Desktop Application Virtualization and Application Streaming: Function and Security Benefits (August 30, 2007)
- Protect Your Organization from Steganographic Data Theft (February 12, 2007)
- Getting to Secure Internet Identity Management (February 12, 2007)
- Keystroke Dynamics: Low impact biometrics verification (September 23, 2006)
- Fundamentals of Storage Media Sanitation (June 3, 2006)
- Spreadsheet Assurance (May 8, 2006)
- Build an Effective Security Awareness Program (April 8, 2006)
- DNS Cache Poisoning: Definition and Prevention (March 16, 2006)
- A Practical Approach to Threat Modeling (March 4, 2006)
- Data Storage Security (February 6, 2006)
- Securing Instant Messaging (January 15, 2006)
Follow this Site