The Internet

A rapidly growing source of InfoSec information is the Internet. There are many groups out on the Internet that discuss both general and specific InfoSec issues. There are many government sites, business sites, sites managed by InfoSec product suppliers, and even easy-to-find hacker sites.

All the Internet sites provide information that can help you learn about InfoSec positions, problems, solutions to those problems, techniques for breaking into systems, etc. All this information is available just by doing an Internet search.

If you do not have Internet access, subscribing to an Internet service provider should be your number one goal. It is almost impossible to be an ISSO professional today without having an Internet account and Internet address for e-mail.

You will probably find that your major problem is not finding useful InfoSec information on the Internet, but keeping up with all of it. Don't feel bad—no one can! Using your completed self-evaluation knowledge charts (Figures 15.2 and 15.3, above), you can concentrate your information search in those areas where you are the weakest. Then, if you have time, you can research and review the other InfoSec documents.

A good way of ensuring that you do the research and review is to:

• Set up your Internet Web sites through the use of your Internet browser's "bookmarks" or "favorites." That way, you won't have to continually search for the sites that have the best information relative to your InfoSec needs.

• Set up a specific time each day when you can and do commit at least 1 hour to reading and learning from the material in your personal library, textbooks, Internet sites, etc.

In order to be successful, you must of course have self-discipline and good study habits. You will find that the rewards of new InfoSec knowledge gained through such study habits, as well as successfully applying those newly learned techniques, will be well worth your efforts.