Cyber Security for the Digital District

Resources are organized in the same order as the Security Rubrid and Planning Grid. For a quick view of security topics, see the Planning Grid Index.	Security Tools and Resources
		OCTAVE - Risk Methodology K12 Survey
		Security strategy, and management
		Security auditing and network tools
	Links to Organizations
		Security strategy, management, and policy
		Technical information on security issues
		User-oriented security awareness and training

Resources: Organizations

Audience: Tech				x	x	Audience:Policy, Planning
Ref	Purpose	Type	Resource			Notes
Management
A 10	Best Practices & Standards	Organization	Computer and Network Security Task Force		x	Educause, in collaboration with Internet2, intends this site to be a focal point of information and resources on computer and network security for the higher education community.
A 10	Best Practices & Standards	Organization	Virginia Alliance for Secure Computing and Networking		x	Higher Education clearinghouse for security tools, security checklist, best practices provided by Virginia Tech, George Mason University, James Madison University, and University of Virginia.
A 10	Best Practices & Standards	Organization	National Communications System		x	National Communications System assists the President to coordinate communications for the Federal Government. It provides a "virtual library" that contains a wealth of information on cyber security.
A 10	Best Practices & Standards	Organization	National Infrastructure Protection Center		x	National Infrastructure Protection Center. This site contains advanced discussions, threat assessment warnings, and links of individual current network/server vulnerabilities, security considerations and mitigating solutions.
A 10	Best Practices & Standards	Organization	Computer Security Resource Center (CSRC)		x	National Institute of Standards and Technology (NIST) is the government resource for standardizing everything-- including security. NIST's Computer Security Resource Center (CSRC) provides guidelines, plans, policies, and assessment tools.
A 11	Public Policy	Organization	OECD Culture of Security		x	The OECD and its 30 member countries are committed to encouraging and developing a global "culture of security". This site collates national and international initiatives to implement the OECD Security Guidelines. It also aims to serve as a portal for collective efforts the world over to develop a global "culture of security".
A 31	Best Practices & Standards	Organization	National Association of Chief Information Officers (NASCIO)		x	National Association of Chief Information Officers (NASCIO) represents the states’ chief information officers, managers, and executives at the state level and provides for an information sharing and collaborative forum to shape national policies.
A 31	Best Practices & Standards	Organization	PCIS (Partnership for Critical Infrastructure Security)		x	PCIS (Partnership for Critical Infrastructure Security) grew out of Presidential Directive 63 and is a collaborative effort of eight sectors: energy, financial services, transportation, communications, information, health, safety, and water. It provides access to security resources useful to those sectors.
A 32	Best Practices & Standards	Organization	Security and Privacy Research Center		x	Security and Privacy Research Center: CIO.com's on-line resource for current trends and high-level overview of security issues. Supported by CXO Media, Inc., an International Data Group (IDG) company.
A 32	Best Practices & Standards	Organization	CERT Home Network Security		x	This is a site for definitive data on important vulnerabilities that are being exploited and what can be done to ameliorate the problem. Also offers an email alert service. The data is often highly technical.
A 32	Best Practices & Standards	Organization	Center for Internet Security (CIS)		x	The Center for Internet Security (CIS) is a non-profit enterprise whose mission is to help organizations reduce the risk of business and e-commerce disruptions resulting from inadequate technical security controls. -- The practical CIS Benchmarks support
A 32	Best Practices & Standards	Organization	Australia's Gateway Certification Guide		x	Australia's Gateway Certification Guide provides an organization details to assure the security perimeter (gateway) of their electronic information systems is consistent with best practices and operating effectively.
A 32	Best Practices & Standards	Organization	The National Security Agency		x	The National Security Agency hosts a site containing "security recommendation guides."
A 33	Threat News	Organization	Symantec Security Check		x	Symantec Security Check

Audience: Tech				x	x	Audience:Policy, Planning
Ref	Purpose	Type	Resource			Notes
Technology
B 10	Best Practices & Standards	Organization	Internet Security Alliance		x	Internet Security Alliance provides a forum for information security issues. The alliance is a collaborative effort between Carnegie Mellon University’s Software Engineering Institute (SEI)*, its CERT Coordination Center (CERT/CC), and the Electronic Industry.
B 14	Tech News	Organization	SpamArchive.Org		x	Repository of Spam for research. SpamArchive.org is a community resource that provides a database of known spam to be used for testing, developing, and benchmarking anti-spam tools. The goal of this project is to provide a large repository of spam that can be used by researchers and tool developers. In the past, there were a few small personal spam archives that were used. There was no large set of spam that could be used to test new anti-spam algorithms. Thus, developers could not sufficiently test their techniques across a range of messages. Also, the lack of a "standard" sample of spam made it difficult to effectively benchmark anti-spam tools.

Audience: Tech				x	x	Audience:Policy, Planning
Ref	Purpose	Type	Resource			Notes
End Users
D 11	Awareness	Organization	America On Line		x	America Online's educational instant messaging robot "AOLSafetyBot"
D 11	Promote Awareness	Organization	I-SAFE America, Inc.		x	Founded in 1998, I-SAFE America is an Internet Safety Education Foundation with major emphasis on empowering kids/teens with knowledge on how to act responsibly and be safe online. The I-SAFE Foundation stands for the principle that all online users should act responsibly and be accountable for their actions while traveling the Information Highway.
D 11	Promote Awareness	Organization	MSN Staying Safe On Line		x	Stay Safe Online is an easy, kid-friendly guide to the Internet hosted by Shaquille O' Neal and his animated friends. This simple, 15 minute program helps children (and parents) make smart choices about the use of Internet chat rooms, e-mail, and web sites.
D 11	Promote Awareness	Organization	StaySafeOnLine		x	The National Cyber Security Alliance is a cooperative effort between industry and government organizations to foster awareness of cyber security through educational outreach and public awareness.
D 11	Promote Awareness	Organization	Safekids.com		x	SafeKids.Com, SafeTeens.Com and The Online Safety Project are operated by Larry Magid, a broadcaster and syndicated columnist and author of numerous articles about online safety.
D 11	Promote Awareness	Organization	The Federal Trade Commission (FTC)		x	The FTC's Cyber Security awareness site features spokesturtle "Dewie." The site gives online safety tips for kids, adults, and businesses for securing their computers against hackers and viruses and provides details on how to become a member of "Team Dewie."
D 11	Promote Awareness	Organization	Cybercitizenship.org		x	The Cybercitizen Awareness Program educates children and young adults on the danger and consequences of cyber crime. By reaching out to parents and teachers, the program is designed to establish a broad sense of responsibility and community in an effort to develop smart, ethical and socially conscious online behavior in young people. Supported by a grant from the U. S. Department of Justice and Inormation Technology Assn of America and managed by the Information Technology Association Foundation.
D 11	Promote Awareness	Organization	NetSmartz		x	Get Netsmart! Teaching children what to watch out for when surfing the internet with fun and interactive games. A Partnership Between the National Center for Missing & Exploited Children and Boys & Girls Clubs of America.
D 11	Promote Awareness	Organization	GetNetWise		x	GetNetWise allows users to be only "one click away" from the resources they need to make informed decisions about their family's use of the Internet.
D 12	Promote Awareness	Organization	CyberSmart!		x	The CyberSmart! School Program offers the first professionally developed curriculum for elementary and middle schools, promoting responsible and effective computer and Internet use. Provided free of charge, this curriculum includes 65 original, standards--based teacher lesson plans with student activity sheets developed by educators and curriculum specialists. Tips for high school students on safeguarding their computer and America's cyber-infrastructure, and CyberSmart! professional development for teachers are also provided.