Common Criteria and Protection Profiles: How to Evaluate Information
The purpose of this paper is to discuss the standards of Common Criteria and the security framework provided by the Common Criteria. In addition, this paper will review the background and applicability of Common Criteria Protection Profiles established to evaluate specific Information Technology (IT) functional and assurance security requirements. Read the Article
Protection Profile, A Key Concept in The Common Criteria
This paper will give a description of the roadmap to the Common Criteria (CC) that basically explains the distinct but related parts and how three key CC user groups namely the consumers, developers and evaluators use them. Read the Article
The need for Security Testing An Introduction to the OSSTMM 3.0
There are a number of myths that companies use to discredit the need for Security testing. This whitepaper will address and discount some of those myths. It will describe the different types of Security testing available to companies and finally introduce the OSSTMM version 3.0. Read the Article
Automating Continuous Process Improvement in the ITIL Framework
IT organizations from every sector are facing the challenge of meeting exceedingly high standards for systems reliability, cost-effective operations, and customer service. Competitive pressures and customer demand from both internal and external users allow no room for mistakes in IT operations. Read the Article
Beyond ITIL CMDBs
Merging ITIL processes with a complete view of the operating environment minimizes error and risk while improving availability, responsiveness, and pro-activity. The result is that the best operating and organizational processes integrate with the best technical practices for a total service management solution. Read the Article
An Introduction to ITIL
What quality of IT service do you provide? To much of the IT community Service Management and Continuous Process Improvement are foreign terms. Most problems are caused by unscheduled or unplanned changes that we make. The level of service we provide from day to day varies based on "production problems" and we say things like "document OR implement". Read the Article