|
Build Security In (BSI) is a collaborative effort that provides practices, tools, guidelines, rules, principles, and other resources so that software developers, architects, and security practitioners can use to build security into software in every phase of its development.
Software Assurance Metrics And Tool Evaluation (SAMATE) supports the DHS Software Assurance Tools and R&D Requirements Identification Program. The objective is the identification, enhancement and development of software assurance tools.
Open Web Application Security Project (OWASP) is an open community focused on improving the security of application software. Our mission is to make application security "visible," so that people and organizations can make informed decisions about application security risks.
SmartBUY Contracts for Information Assurance and Data Security (GSA)
Enterprise Software Initiative (ESI) (DOD)
National Information Assurance Partnership (NIAP) validated products list
Information Systems Security Line of Business (ISS LOB) for security training services from DOD and Joint State/USAID (JSAS)
IdentityManagement.gov provides a one-stop shop for citizens, businesses, and government entities interested in identity management activities, including topics related to Homeland Security Presidential Directive 12, Public Key Infrastructure, and E-Authentication.
Information Sharing Environment (ISE) The Intelligence Reform and Terrorism Prevention Act of 2004 called for the creation of an ISE. The ISE is to facilitate the establishment of a trusted partnership among all levels of government, the private sector, and foreign partners and promote more rapid and effective interchange and coordination. The ISE must also ensure sharing procedures and policies protect information privacy and civil liberties.
Fusion Centers and Intelligence Sharing part of the DOJ Global Justice Information Sharing Initiative's (Global) efforts to develop fusion center guidelines.
INFOSEC Assurance Training and Rating Program (IARTP) sets the standards for INFOSEC Assurance services through the INFOSEC assurance methodologies (INFOSEC Assessment Methodology, INFOSEC Evaluation Methodology), trains and certifies individuals in the methodologies, and rates INFOSEC Assurance organizations through the use of a standard metric INFOSEC Assurance - Capability Maturity Model (IA-CMM).
Microsoft Trustworthy Computing Initiative is a long-term, collaborative effort to create and deliver secure, private, and reliable computing experiences. Microsoft’s commitment to fundamentally change its mission and strategy in the key areas of Security, Privacy, Reliability, and Business Practices.
|