Showing posts with label security standards. Show all posts
Showing posts with label security standards. Show all posts

Monday, January 26, 2009

IT Security Benchmarking: the CIS Benchmarks

The Center for Internet Security, or CIS provides a variety of publicly available benchmarks which can provide an excellent foundation for your own organization's technical security standards. Perhaps more interesting, they also work to develop new benchmarks for various platforms, systems, and software packages. At the moment, an iPhone benchmark is in progress, with version 1.0 for iPhone software version 2.2 in progress right now.

The CIS toolkit also includes a variety of scoring tools, and mailing lists for each benchmark, including those in development.

Friday, August 22, 2008

MacOS Security Guidelines and Best Practices: Corsaire's "Securing Mac OS X Leopard (10.5)"

Daniel Cuthbert of Corsaire has published "Securing Mac OS X Leopard (10.5)", a lockdown and general security guide for MacOS 10.5. If you're building a MacOS security guideline, you should take a look.