binding, the text contains direct guidelines for the creation of sound information security practices. The standard is mostly intended as a guiding complementary document to the application of the aforementioned ISO 27001:2005, and is therefore typically applied in conjunction with this standard in risk assessment practices Information Security Forum Standard of Good Practice See also Asset (computer security) Availability BS 7799 BS 25999 Committee on National Security Systems Common Criteria Confidentiality Cyber-security regulation Data Protection Directive Electrical disruptions caused by squirrels Exploit (computer security) Factor analysis of information risk Federal Information Security Management Act of 2002 Gramm–Leach–Bliley Act Health Insurance Portability and Accountability Act Information security Information Security Forum Information technology Integrity International Safe Harbor Privacy Principles ISACA ISO ISO/IEC 27000-series ISO/IEC 27001:2013 ISO/IEC 27002 IT risk management Long-term support National Information Assurance Training and Education Center National Institute of Standards and Technology National security OWASP Patriot Act, Title III Privacy Risk Risk factor (computing) Risk IT Sarbanes–Oxley Act Standard of Good Practice Threat (computer) Vulnerability References External links Internet2 Information Security Guide: Effective Practices and Solutions for Higher Education Risk Management – Principles and Inventories for Risk Management / Risk Assessment methods and tools, Publication date: Jun 01, 2006 Authors:Conducted by the Technical Department of ENISA Section Risk Management Clusif Club de la Sécurité de l'Information Français 800-30 NIST Risk Management Guide 800-39 NIST DRAFT Managing Risk from Information Systems: An Organizational Perspective FIPS Publication 199, Standards for Security Categorization of Federal Information and Information FIPS Publication 200 Minimum Security Requirements for Federal Information and Information Systems 800-37 NIST Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach FISMApedia is a collection of documents and discussions focused on USA Federal IT security Duty of Care Risk Analysis Standard (DoCRA) Data security Risk analysis Security Security compliance Operational risk