Литература

[1] Марк Кобзарь , Игорь Калайда -- Общие критерии оценки безопасности информационных технологий и перспективы их использования / -- Jet Info , 1 , 1998

[2] Code of practice for Information security management. British Standard BS7799 , 1995

[3] X/Open Baseline Security Services Specification (XBSS). C529 -- X/Open company , 1996

[4] Information Technology Security (ITS) Minimum Baseline Protective Requirements -- http://esdis.dsfo.nasa.gov/SECURITY/REQ/BASEREQ/basereqlist.html

[5] Bundesamt fur Sicherheit in der Informationstechnik. IT Baseline Protection Manual , 1998

[6] Владимир Галатенко -- Информационная безопасность -- Jet Info , 1-3 , 1996

[7] Владимир Бетелин , Владимир Галатенко -- Информационная безопасность в России: опыт составления карты / -- Jet Info , 1 , 1998

[8] Guide to BS 7799 risk assessment and risk management. DISC PD 3002 , 1998

[9] Information security management. Part 2. Specification for information security management systems. British Standard BS7799, Part 2 , 1998

[10] Information security management: an introduction. DISC PD 3000 , 1998

[11] Preparing for BS 7799 certification. DISC PD 3001 , 1998

[12] Are you ready for a BS7799 audit? DISC PD 3003 , 1998

[13] Guide to BS 7799 auditing. DISC PD 3004 , 1998

[14] Code of practice for IT management. DISC PD 0005 , 1998

[15] Guide to the Code of practice for Information Security Management. DISC PD 0007 , 1995

[16] Code of practice for legal admissibility of information stored on electronic document management systems. DISC PD 0008 , 1995

[17] Principles of good practice for information management. DISC PD 0010 , 1995

[18] Automated Information Systems Security Policy Manual, NIST, CIS HB 1400-14

[19] CRAMM User Guide , 1996

[20] A practical guide to the use of CRAMM , 1998

Заключение	Содержание	Термины и определения