United States Computer Emergency Readiness Team (US-CERT), l’ente americano espressione del Department of Homeland Security che coordina le difese contro i “cyber attack” ha pubblicato l’IT Security Essential Body of Knowledge (EBK) (pdf, 401 K, 44 pp). Il documento contiene il corpus concettuale di conoscenze ritenute necessarie per la sicurezza delle informazioni in ambito USA. Non si tratta di una nuova guideline né di un nuovo standard ma della sistematizzazione dei concetti chiavi della IT Security anche dal punto di vista dei ruoli e delle responsabilità.

Indice del documento

1. Introduction
   • 1.1 Overview
   • 1.2 Background
   • 1.3 Purpose
   • 1.4 Scope
   • 1.5 Methodology
   • 1.6 Organization
2. IT Security Competency Areas (Definitions and Functions)
   • 2.1 Data Security
   • 2.2 Digital Forensics
   • 2.3 Enterprise Continuity
   • 2.4 Incident Management
   • 2.5 IT Security Training and Awareness
   • 2.6 IT Systems Operations and Maintenance
   • 2.7 Network Security and Telecommunications
   • 2.8 Personnel Security
   • 2.9 Physical and Environmental Security
   • 2.10 Procurement
   • 2.11 Regulatory and Standards Compliance
   • 2.12 Risk Management
   • 2.13 Strategic Management
   • 2.14 System and Application Security
3. The IT Security Essential Body of Knowledge
4. IT Security Roles, Competencies and Functional Perspectives
   • 4.1 Chief Information Officer
   • 4.2 Digital Forensics Professional
   • 4.3 Information Security Officer/Chief Security Officer
   • 4.4 IT Security Compliance Professional
   • 4.5 IT Security Engineer
   • 4.6 IT Systems Operations and Maintenance Professional
   • 4.7 IT Security Professional
   • 4.8 Physical Security Professional
   • 4.9 Privacy Professional
   • 4.10 Procurement Professional
5. IT Security Role, Competency, and Functional Matrix
6. Appendix: List of Acronyms

Articoli collegati in questo sito

• Ultimi articoli sulla sicurezza:
  • ANSSAIF – disponibili gli atti del IV convegno annuale del 14 e 15 settembre 2007
  • Crypto-Gram del 15 ottobre 2007
  • Governance & Risk Management: a colloquio con Maurizio Simionato di IBM Italia
• Tutti gli articoli sulla sicurezza

Link

• Sito US-CERT
• Sito del Department of Homeland Security
• "Information Technology (IT) Security Essential Body of Knowledge (EBK): A Competency and Functional Framework for IT Security Workforce Development" (pdf, 401 K, 44 pp)