[SunHELP] Security Alerts

[velociraptor]

CERT is probably top of the list:  http://www.cert.org/

CIS is also a good site: http://www.cisecurity.org/
(For instance the US Office of the Inspector General uses
the CIS benchmark tool for auditing Solaris--going through
this with some of our systems at the moment.)

And Security Focus: http://www.securityfocus.com/
for more general security info.

=Nadine=

On 6/20/05, Grindell, Joan M. <GrindellJ at sec.gov> wrote:
> Good morning,
>
>         I'm writing up a patch management policy. In the policy I'd like to
> add requirements for obtaining security alerts.  We are currently signed up
> for Sun's Security weekly notification.  Are there any other reports that
we
> should be looking at (organizations that email (etc.) alerts whether
> periodically or as discovered).
>
> Many thanks,
> Joan
> _______________________________________________
> SunHELP maillist  -  SunHELP at sunhelp.org
> http://www.sunhelp.org/mailman/listinfo/sunhelp
>