Appendix A. Tips on Keeping Up-to-Date

There are two strategies that I recommend for keeping active in the security world and maintaining awareness of new vulnerabilities, exploits, and countermeasures:

• Subscribe to at least two security alert services (free or paid). Such services will normally generate an email when a new threat is discovered. Assign someone to spend 10 minutes a day reading about new issues and determining which ones concern the organization.

• Spend 15 minutes a day reading two security news Web sites, studying those events that could affect the organization.