EH-Net

Ethical Hacking Discussions and Related Certifications => Other => Topic started by: T_Bone on July 30, 2010, 01:36:31 AM



Title: Info on Security Controls
Post by: T_Bone on July 30, 2010, 01:36:31 AM
Any ideas on the best book or source of information regarding the topic of security controls. 


Title: Re: Info on Security Controls
Post by: vekarman on July 31, 2010, 02:02:56 AM
Probably, ISO document may provide you the details of 134 controls.


Title: Re: Info on Security Controls
Post by: Ketchup on July 31, 2010, 05:40:53 PM
Any high level security book do the trick, if I understand your question correctly.   The CISA or CISSP track, for example, would have information on security controls.   You can also look at standards, such as COBIT or ISO 27002/17799. 

What are you looking for specifically? 


Title: Re: Info on Security Controls
Post by: hayabusa on July 31, 2010, 08:06:02 PM
I'll second ketchup's response...  and his question.  What exactly are you looking for?  The topic can be VERY general, and without some specifics, it's hard to point you in any given direction. 

For instance, are we talking security as in policy / procedure / posture, or physical / logical security, or something a little more specific, pertaining to a specific regulation or mandate, such as HIPPA, COBIT, PCI?


Title: Re: Info on Security Controls
Post by: ajohnson on July 31, 2010, 09:48:02 PM
This has been my favorite book for this type of thing: http://www.amazon.com/Information-Technology-Control-Audit-Third/dp/1420065505/ref=sr_1_1?ie=UTF8&s=books&qid=1280630847&sr=8-1


Title: Re: Info on Security Controls
Post by: T_Bone on August 01, 2010, 04:19:57 PM
Sorry, my question was quite vague!

It was more of a question at looking at critical security controls and what systems are affected by particular controls (if this makes sense).  I have been looking at the below link from SANS, this is kind of what i am after! 

http://www.sans.org/critical-security-controls/control.php?id=1