Dana Epp's ramblings at the Sanctuary: Security Guides for Small Business

March 16, 2006

Security Guides for Small Business

Last year at SMBNation Susan and I put together a bunch of links that would help small businesses get information on dealing with security. I thought I would provide some of that information here:

Consensus Benchmark Technical Controls
Security Guide for Small Businesses
Microsoft’s Security Center for Small Businesses
US Chamber of Commerce Small Business Security Center
e-Security Guide for Small Business (Association of Small Business Development Centers, and Microsoft)
Small Business Best Practices (draft) (Internet Security Alliance and Small Business Working Group)
FTC Consumer and Business Education on Online Security
Cybersecurity and Consumer Data: What’s at Risk for the Consumer? – Prepared statement of the Federal Trade Commission (FTC) before the Commerce, Trade, & Consumer Protection Subcommittee, Committee on Energy & Commerce, U.S. House of Representatives, Nov. 19, 2003
NIST 800-26 Security Self-Assessment Guide for Information Technology Systems
NIST 800-50 Building an Information Technology Security Awareness and Training Program

I will follow up with links more dedicated to regulatory compliance shortly.

Posted by SilverStr at March 16, 2006 02:40 PM | TrackBack

Comments

I was going to suggest, during Q&A that the new, upgraded threat-modeling tool might be useful too. I hesitated because I wasn't sure how non-geeky it is. I liked the first version, and the book, but I'd just taken a course using Ross Anderson's book too.

Well, maybe it is useful for small business in its new form. This blog post suggests that it might be accessible and usable: http://blogs.msdn.com/threatmodeling/archive/2006/03/16/553232.aspx

Posted by: orcmid at March 16, 2006 07:32 PM


« Follow up to my Small Business Summit presentation on the 5 Rules of the Regulatory Process \| Main \| Links for Sites of Interest about Regulatory Compliance » March 16, 2006 Security Guides for Small Business Last year at SMBNation Susan and I put together a bunch of links that would help small businesses get information on dealing with security. I thought I would provide some of that information here: Consensus Benchmark Technical Controls Security Guide for Small Businesses Microsoft’s Security Center for Small Businesses US Chamber of Commerce Small Business Security Center e-Security Guide for Small Business (Association of Small Business Development Centers, and Microsoft) Small Business Best Practices (draft) (Internet Security Alliance and Small Business Working Group) FTC Consumer and Business Education on Online Security Cybersecurity and Consumer Data: What’s at Risk for the Consumer? – Prepared statement of the Federal Trade Commission (FTC) before the Commerce, Trade, & Consumer Protection Subcommittee, Committee on Energy & Commerce, U.S. House of Representatives, Nov. 19, 2003 NIST 800-26 Security Self-Assessment Guide for Information Technology Systems NIST 800-50 Building an Information Technology Security Awareness and Training Program I will follow up with links more dedicated to regulatory compliance shortly. Posted by SilverStr at March 16, 2006 02:40 PM \| TrackBack Comments I was going to suggest, during Q&A that the new, upgraded threat-modeling tool might be useful too. I hesitated because I wasn't sure how non-geeky it is. I liked the first version, and the book, but I'd just taken a course using Ross Anderson's book too. Well, maybe it is useful for small business in its new form. This blog post suggests that it might be accessible and usable: http://blogs.msdn.com/threatmodeling/archive/2006/03/16/553232.aspx Posted by: orcmid at March 16, 2006 07:32 PM		My 5 Favorite Books Writing Secure Code Secure Programming Cookbook Security Engineering Secure Coding Principles & Practice Inside the Security Mind My 5 Favorite Papers Smashing the Stack Penetration Studies Covert Channel Analysis of Trusted Systems DoD Trusted Computer System Evaluation Criteria NSA Security Recommendation Guides Archives March 2007 February 2007 January 2007 December 2006 November 2006 October 2006 September 2006 August 2006 July 2006 June 2006 May 2006 April 2006 March 2006 February 2006 January 2006 December 2005 November 2005 October 2005 September 2005 August 2005 July 2005 June 2005 May 2005 April 2005 March 2005 February 2005 January 2005 December 2004 November 2004 October 2004 September 2004 August 2004 July 2004 June 2004 May 2004 April 2004 March 2004 February 2004 January 2004 December 2003 November 2003 October 2003 September 2003 August 2003 July 2003 June 2003 May 2003 April 2003 March 2003 February 2003 January 2003 December 2002 November 2002 October 2002 September 2002 August 2002 July 2002 GeoURL