State of Texas
Department of Information Resources
Leadership for Texas Government Technology

Reading Room

• Alerts & Patches
• Associations & Organizations
• Cybercrime
• DIR Cyber Security Tips
• Disaster Recovery
• FAQs
• Hoaxes
• Law/Legislation
• Listservs
• Security Publications
• Security Reports

Alerts & Patches

• CERT
• CIAC - USDOE
• CSRC - NIST
• SANS - Incidents.org
  • SANS/FBI Top 20 Most Commonly Exploited Vulnerabilities
• ARIS Attack Registry
• AVERT - McAfee
• HoaxBusters
• Linux Security
• Microsoft Security
• National Vulnerability Database
• SecurityFocus
• Sun
• Symantec
• Trend Micro Virus Info

Back to Top

Associations & Organizations (see also Cybercrime below)

• American Society for Industrial Security
• Association of Contingency Planners (ACP), Capitol of Texas Chapter
• Association of Contingency Planners (ACP), International
• Central Texas LAN Association (CTLA)
• CERT
• CIAC - USDOE
• CSRC - NIST
• DHHS - HIPAA
• Emergency Information Infrastructure Partnership
• Federal Computer Investigations Committee
• Federal Emergency Management Agency (FEMA)
• FIRST - Forum of Incident Response and Security Teams
• Forensic Association of Computer Technologists (F.A.C.T.) - Contact Doug Elrick, 515-281-3666
• High Technology Crime Investigation Association (HTCIA)
• Information Security Sources and Links
• Information Systems Audit and Control Association (ISACA)
• ISSA - Information Systems Security Association, Texas Chapters
• ISSA - Information Systems Security Association, International
• InfoWorld - Security
• INFRAGARD - Sponsored by the National Information Protection Center and the FBI
• International Association of Computer Investigative Specialists
• National Cyber Security Alliance
• National Infrastructure Protection Center (NIPC)
• SANS
• SecurityFocus
• Survive - Disaster recovery training organization
• TrendMicro

Back to Top

Cybercrime

• Austin High Tech Crime Unit
• Austin Metro High Tech Foundation (AMHTF)
• FBI – Internet Fraud Complaint Center
• National Infrastructure Protection Center (NIPC)
• Texas Department of Public Safety – Computer Crimes
• Texas Office of Attorney General- Cyber Crime Unit

Back to Top

DIR Cyber Security Tips

Information about file formats. Download Adobe Reader

2008

October 2008

• Phishing – How to Avoid Getting Hooked – HTML
• Phishing – How to Avoid Getting Hooked – PDF (139 KB)
• Personal Privacy – HTML
• Personal Privacy – PDF (132 KB)

September 2008

• Firewalls – HTML
• Firewalls – PDF (129 KB)

August 2008

• Top Ten Cyber Security Risks – HTML
• Top Ten Cyber Security Risks – PDF (149 KB)
  

July 2008

• What is a Data Breach? – HTML
• What is a Data Breach? – PDF (186 KB)

June 2008

• Using Encryption to Protect Data – HTML
• Using Encryption to Protect Data – PDF (111 KB)

May 2008

• Social Engineering – Are You at Risk? – HTML
• Social Engineering – Are You at Risk? – PDF (137 KB)

April 2008

• Unintended Information Disclosure – HTML
• Unintended Information Disclosure – PDF (133 KB)

March 2008

• Dealing with Cyberbullies – HTML
• Dealing with Cyberbullies – PDF (133 KB)

February 2008

• Securing a Wireless Network – HTML
• Securing a Wireless Network – PDF (129 KB)

January 2008

• Securing Your Laptop Computer – HTML
• Securing Your Laptop Computer – PDF (114 KB)

2006 – 2007 DIR Cyber Security Tips

Back to Top

Disaster Recovery

• Disaster Recover Journal
• Emergency Information Infrastructure Forum
• Federal Emergency Management Agency (FEMA)
• Gartner – The Aftermath: Disaster Recovery and Planning for the Future
• Survive (Disaster recovery training organization)

Back to Top

FAQs

• Rx2000 HIPAA FAQ

Back to Top

Hoaxes

• HoaxBusters
• HoaxKill
• Urban Legends

Back to Top

Law/Legislation

• DHHS - HIPAA Privacy Standards
• DHHS - HIPAA Security Standards
• AHA HIPAA Standards
• Baltimore Technologies - The top 5 things you need to know about HIPAA
• Rx2000 HIPAA FAQ
• Siemens HIPAA Overview

Back to Top

Listservs

• ARMA (RECMGMT) - e-mail to: listserv@listserv.syr.edu
• Best of Security List - e-mail to: best-of-security-request@cyber.com.au
• CERT Announcements - e-mail to: cert-advisory-request@cert.org
• CIAC Advisories - e-mail to: Majordomo@tholia.llnl.gov
• Disaster Prevention & Recovery Alliance - e-mail to: ListDPRA-REQUEST@INFOMANAGE.COM
• Disaster Recovery - e-mail to: majordomo@magnacom.com
• Firewalls Digest - e-mail to: majordomo@greatcircle.com
• Firewalls mailing list - hosted by GNAC, Inc.
• HIPAA-REGS List - Stay informed about HIPAA
• Internet Security Systems List of Lists
• Intrusion Detection Systems - e-mail to: majordomo@uow.edu.au
• IRAP List - for State of Texas Information Resources Asset Protection professionals
• Computer Crime - e-mail to: majordomo@suburbia.net
• LEPC Hazardous Materials Response Planning - e-mail to: listserv@moose.uvm.edu
• Linux Security Issues - e-mail to: linux-security-request@RedHat.com
• NT Security Issues - e-mail to: majordomo@iss.net
• RISKS Forum - e-mail to: majordomo@csl.sri.com
• SANS NewsBites
• SANS Security Alert Consensus
• SecurityFocus Mailing Lists
• Security Wire - from Information Security

Back to Top

Publications

• Cipher - IEEE Technical Committee on Security & Privacy
• Contingency Planning - magazine
• Disaster Recovery Journal
• InfoSecurity News
• Information Security Magazine
• Journal of Information, Law and Technology
• OnGuardOnline.gov
• Recommended Security Controls for Federal Information Systems (NIST Special Publication draft 800-53)
• Standards for Security Categorization of Federal Information and Information Systems
  (NIST draft Federal Information Processing Standards Publication)
• The International Journal of Forensic Computing

Back to Top

Reports

• Security Report: Windows vs Linux - The Register
• New Report Surveys and Analyzes Technologies to Combat ''Phishing'' - Government Technology
• The Twenty Most Critical Internet Security Vulnerabilities - SANS
• How Far is Far Enough? ACP Survey Results
• Statewide Information Technology Security Assessment Final report - An assessment of the current status of Texas state security preparedness and review of the statewide security structure, with an emphasis on online systems connected to the Internet and the feasibility of consolidating operations for small agencies.
• Texas Consolidated Monthly Incident Reports
• Website lists programs with spyware
  StopBadware.org provides info about programs that contain spyware and other malicious software.

This site is a reference site. The links are to provide information security professionals and business continuity planners with a comprehensive listing of references to find answers, learn, stay abreast of the newest information. Some of the information provided in these sites are from commercial vendors and are not an endorsement of any kind. They are used for informational purposes only.

Send comments and questions to the IT Security Division.