Basics

Security Basics

Fundamentals of information security, physical and corporate security, business continuity, and more.

CSO — Whether you're new to the field of security, expanding your skill set or just keeping your fundamentals sharp, these primers will do the trick.

Information Security and Audit

How to Write an Information Security Policy
Where to start, what to cover and how to make your overall policy effective.
by Jennifer Bayuk

Information System Audit Basics
What should you expect from an IS audit? Here's a step-by-step walkthrough.
by Jennifer Bayuk

Network Security
Defense in depth, role-based access control, and other critical concepts
by Stephen Northcutt, SANS Institute

Wireless Security
Encryption and authentication are they key
by Galen Gruman

Incident Detection, Response and Forensics
How to build a robust function for dealing with computer security incidents
by Richard Bejtlich

VoIP Security
Dealing with vishing, SPIT and more
by Bob Bradley, Sonus Networks

Service-Oriented Architecture (SOA) Security
Threats and defensive techniques in SOAP/WSDL and REST-based architectures
by Mark O'Neill, Vordel

Phishing: The Basics
How to foil identity theft and other phishing attempts

Identity Management Basics

Physical Security and Business Continuity

How to Handle Pickets and Strikes
9 things security should do - and 6 things you absolutely can't do - to help ensure a strike or picket remains peaceful
by Anthony Manley

The Physical Access Control Project Planner
Planning walkthroughs, avoiding common project pitfalls, and more
by Jason Cowling

The CCTV Project Planner
The lowdown on frame rates, storage requirements and other CCTV considerations
by Jason Cowling

Video Surveillance and Data Monitoring

The 6 Things You Should Know About Executive Protection

19 Ways to Build Security Into a Data Center
Mantraps, biometrics and simpler measures as well

Intellectual Property Protection
Do you know the difference between a trade secret and a copyright? Have you taken a holistic look at legal, technical and procedural means of protecting your organization's intellectual property?

Business Continuity and Disaster Recovery
How to ready your human, physical and IT infrastructure for disasters or business interruption.

Home Security Basics
by Chris McGooey