SEC566: Implementing and Auditing the Twenty Critical Security Controls - In-Depth

摘要

In the last couple of years it has become obvious that in the world of information security, the offense is outperforming the defense. Even though budgets increase and management pays more attention to the risks of data loss and system penetration, data is still being lost and systems are still being penetrated. Over and over people are asking, "What can we practically do to protect our information?"The answer has come in the form of 20 information assurance controls known as the Consensus Audit Guidelines (CAG).