full-disclosure - Re: CyTRAP Labs - Urs+Nahum's Security Checklist

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <28f529ba0705291453u27d97a96o1baf0a90fc209b28@mail.gmail.com>
Date: Tue, 29 May 2007 14:53:17 -0700
From: blah <blah@...kogre.com>
To: "CyTRAP Labs - advisory" <Report_exploit@...rap.eu>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: CyTRAP Labs - Urs+Nahum's Security Checklist

I tried the link you listed, but it didn't work (no surprise there since
it's "not released"), but it looks like the document's available at:
http://www.cytrap.eu/files/ReguStand/2007/pdf/Urs%2BNahumChecklist-2007-05-29.pdf

so i guess it is released.  who wants to wait til tomorrow?



On 5/28/07, CyTRAP Labs - advisory <Report_exploit@...rap.eu> wrote:
>
>
>
> Dear Colleagues,
>
> I thought this might be of interest....regulators have done their best to
> improve legislation to help organizations to better protect their
> information systems.
>
> Unfortunately and as a result of this, organizations have been buried in
> an
> avalanche of conflicting requirements that are difficult to keep track
> off.  They are expected to demonstrate an acceptable standard of due care
> in managing their computing infrastructures and the information that
> networks and systems create, transmit, and store. Moreover, they have to
> show that all this helps reduce the risk against having their systems
> misused for criminal activities.
>
> Hence, we thought we write Urs+Nahum's Security Checklist. It provides
> well
> structured information that enables high-level reporting, thus empowering
> executive and technical leaders with a greater ability to make informed
> decisions. It prioritizes numerous requirements that managers need,
> guiding
> them through the process that improves corporate risk management and
> information security while helping improve confidentiality of data and
> citizens' privacy.
>
> You can get a short summary here:
>
> - short summary about Urs+Nahum's Security Checklist  - press release --
> http://info.cytrap.eu/?page_id=64
>
> - an advanced copy of  Urs+Nahum's Security Checklist  pdf 350 KB for
> download -  http://regustand.cytrap.eu/?p=1  (PS. it is complementary and
> free for everybody, of course)
>
> Urs+Nahum's Security Checklist will be released May 30, 2007.  We hope
> that
> it will be useful to you all.... in your daily work. Please let us know
> what you think about this work, if you can spare the time, of course.
>
> Enjoy your long weekend.
>
>
> Cordially
>
> Urs E. Gattiker
>        CyTRAP Labs
>        Roentgenstrasse 49
>        8005 Zurich
>        Switzerland
>        +41 (0)44 272 - 1876
>        +41 (0)76 200 - 7778 (mobile)
>        email: Urs+Nahum-Checklist at CyTRAP.eu
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/