Implementing and Auditing the Twenty Critical Security Controls - In Depth

摘要

Even though budgets increase and management pays more attention to the risks of data loss and system penetration, data is still being lost and systems are still being penetrated. Over and over people are asking,“What can we practically do to protect our information?" The answer has come in the form of 20 information assurance controls known as the Consensus Audit Guidelines (CAG), located at www.sans.org/critical-security-controls/guidelines.php.