New version of 20 top security controls is available

By William Jackson
GCN.com
Dec 10, 2009

Version 2.3 of the Consensus Audit Guidelines, the top 20 critical
security controls agreed on by a consortium of private and government
security experts, has been released and is available on the Web site of
the SANS Institute.

The consortium includes the National Security Agency, the U.S. Computer
Emergency Readiness Team, and agencies from the departments of Defense,
State and Energy, in addition to commercial forensics experts and white
hat hackers. The controls are intended to help large enterprises
prioritize and automate efforts to block known attacks and identify
intrusions. They include 15 automated controls and five additional
controls that cannot be automated to the same degree.