The information security field is growing rapidly. This Resources page will direct you to additional sources of information, whether you're interested in learning more about the field in general, seeking specific information, or trying to keep up with the latest headlines.

Information Security toolkit

- COMING SOON - a business-focused toolkit for small business owners to understand and address their company's information security needs

Information Security education in Southeast Michigan

- a list of the local colleges, universities, and private training centers that offer education and training with a specific Information Security focus

News and Research

• Standards and best practices
• GAISP: Generally Accepted Information Security Principles v3.0: a best practices document from the Information Systems Security Association (ISSA)
• An Introduction to Computer Security: The NIST Handbook: a best practices document from the National Institute of Standards and Technology
• Common Sense Guide to Prevention and Detection of Insider Threats: published by the Carnegie Mellon University Software Engineering Institute
• Implementing a Trusted Information Sharing Environment: the Markle Foundation Task Force on National Security in the Information Age report on best practices using immutable audit logs (IALs) to protect sensitive information



• Business Impact
• Cyber Attacks on the Rise: a 2007 whitepaper published by the IBM Internet Security Systems X-force research and development team



• Information Security Workforce
• 2006 Global Information Security Workforce Study: a look at trends and opportunities emerging in the information security sector published by the International Information Systems Security Certification Consortium ( (ISC)2 )
• Information Security and Southeast Michigan Business: a 2006 survey conducted by the Southeast Michigan Information Security Regional Skills Alliance to assess the perceived need for an information security workforce among regional employers
  
  Full Report
  
  Condensed Report



• About Information Security
• U.S. Department of Homeland Security: Cyberstorm: a report on DHS's 2006 exercise to test response, coordination, and recovery from a simulated cyber attack
• GAO Critical Infrastructure Protection Report: a report on the progress of compliance with the DHS National Infrastructure Protection Plan

RSA Event Presentations

The Common Definition of IA
Dr.Dan Shoemaker, University of Detroit Mercy

Protecting the Global Information Grid
Kevin Hooks, TACOM

Disseminating Career Information to K-12
Marilyn Gobe, Oakland Intermediate School District

Regional RSA School Program
Nan Poulios, Walsh College

Teen Cert
Gary Zulinski, Eastern Michigan University

ISO 20000-ITIL
John DiMaria, BSI Management Systems

The Hard Fact of Total Security
Dr.Dan Shoemaker, University of Detroit Mercy