Auditing Your Security Infrastructure
Need to Know More?
www.jebcl.com/riskdo/riskdo.htm Risk assessment do's and don'ts
www.usatoday.com/money/jobcenter/workplace/recruiting/2002-11-20-legal_x.htm Keeping pre-employment checks legal
http://library.lp.findlaw.com/articles/file/00334/002357/title/Subject/topic/Employment%20Law_At-will%20Employment/filename/employmentlaw_1_454 Self-audits of employment practices
http://csrc.nist.gov/nissc/1997/panels/isptg/pescatore/html/sld001.htm Building effective security policies
http://searchnetworking.techtarget.com/tip/1,289483,sid7_gci1033304,00.html Ten traits of effective policy
www.sans.org/resources/policies/ Policy templates and information
www.itl.nist.gov/lab/bulletns/bltnoct03.htm Building an effective security-awareness program
www.computerworld.com/careertopics/careers/training/story/0,10801,54375,00.html Methods to build effective security awareness
www.microsoft.com/technet/security/topics/policiesandprocedures/secrisk/srsgch02.mspx Risk-management guide