ON-LINE REFERENCES

Optimizing an Organization's Security Effectiveness by Using Vulnerability Management to Support the Assessment Function

http://www.criticalwatch.com/press/bunker_article.pdf

Vulnerability Assessment and Survey Program: US Department of Energy, Office of Energy Assurance

http://www.esisac.com/publicdocs/assessment_methods/OEA_VA_Methodology.pdf

Practical Patch Management

http://www.nwfusion.com/supp/security2/patch.html

eWeek Labs Answers Patch Management Questions

http://www.eweek.com/prnit_article/0,3048,a=59180,00.asp

Five Tips for Effective Patch Management

http://www.computerworld.com/printthis/2003/0,4814,82458,00.html

How to Report Internet Related Crime

http://www. usdoj .gov/criminal/ cybercrime /reporting.htm

Role Based Access Control

http://csrc.nist.gov/rbac/rbac-std-ncits.pdf

ISO/IEC 17799 International code of practice

http://www.iso.ch/iso/en/prods-services/popstds/informationsecurity.html (Site to purchase standard documentation)