ForHacSec

Professional Bodies

• British Computer Society
• Institute of Risk Management
• IIA Inc – parent body of IIA
• International Professional Practice Framework – Standards and Guidance from the IIA
• IIA Australia – What’s going on down-under
• The Information Commissioner’s Office – Data protection and personal data matters (UK)

• The Chartered Institute of Public Finance and Accountancy
• The Information Systems Audit and Control Association (ISACA)
• The Information Systems Security Association – A not-for-profit, international organisation of information security professionals and practitioners
• Institute of Chartered Secretaries and Administrators – Global voice on governance and regulatory issues in the private, public and not-for-profit sectors
• The Association for Project Management

Governance and Risk Management

• UK Corporate Governance Codes
• Governance Codes for all Countries – The A – Z of governance around the world
• IT Governance Institute – Guidance on current and future issues pertaining to IT governance, control and assurance
• OECD – Organisation for Economic Cooperation and Development – International Corporate Governance issues, including the OECD Guidelines on Corporate Governance of State-Owned Enterprises
• The Committee of Sponsoring Organisations of the Treadway Commission (COSO) – Organisation dedicated to improving the quality of financial reporting through ethics, effective internal controls, and corporate governance
• Institute of Risk Management – Risk Management Standard – This Risk Management Standard is the result of work by a team drawn from the major risk management organisations in the UK – The Institute of Risk Management (IRM),The Association of Insurance and Risk Managers (AIRMIC) and ALARM The National Forum for Risk Management in the Public Sector
•  HM Treasury Governance and Risk – Governance, Fraud, Internal Audit and Risk

Audit & Reporting

• Financial Reporting Council – Links to Accounting Practices Board, Auditing Practices Board and others

• Audit Commission – Code of Audit Practice 2010 – Local Government – Also includes codes for 2005 and 2008
• Audit Commission – Code of Audit Practice 2010 – Local NHS bodies – Also includes codes for 2005 and 2008
• Review of Civil Procurement in Central Government -The Gershon Report
• Review of Construction Procurement (including PFI) -Includes key recent policy documents and case studies
• Serious Fraud Office – Dealing with fraud, bribery and corruption

Legislation – UK & Europe

• Browse UK Legislation – Rapidly find relevant UK legislation
• Computer Misuse Act 1990 – Computer abuse
• Consumer Protection (Distance Selling) Regulations 2000
• Convention for the Protection of Human Rights – Europe – Human Rights and the Council of Europe, read in conjunction with UK Human Rights Act
• Copyright, Designs and Patents Act 1988 – (Includes) Software protection
• Criminal Justice Act 2003 – Criminal Justice Act 2003
• Criminal Procedure and Investigations Act 1996 – Procedures for criminal investigations
• Data Protection Act 1998 – Personal data and personal & sensitive data
• Data Protection Act Audit Guide – Audit Guide from the Office of the Information Commissioner
• Data Protection Act and Monitoring in the Workplace (pdf)
• Electronic Communications Act 2000 – Cryptography and the facilitation of electronic commerce through the use of digital signatures
• Data Protection in the European Union
• Freedom of Information Act 2000 (UK) and Freedom of Information Act 2002 (Scotland)
• Human Rights Act 1998 – UK Human Rights Act
• Police and Criminal Evidence Act 1984 (PACE) – Policing regulations regarding the treatment of person(s), proceedings and evidence in the course of criminal investigations.
• Privacy and Electronic (EC Directive) Regulations 2003 – Legislation that assists privacy in the field of telecommunications
• Proceeds of Crime Act 2002 – About recovery of or seizure of assets related to crime
• Regulations of Investigatory Powers Act 2000 – About lawful and unlawful electronic interception and the need to disclose data to law enforcement
• Sustainable Energy Act 2003 – The requirement to publish annual progress reports showing carbon reduction achievements

Privacy at Home

• OFCOM – The independent regulator for UK communications
• Mail Preference Service – Block unwanted mail
• Telephone Preference Service – Block unwanted telephone calls
• FAX Preference Service – Block unwanted fax calls

Standards & Guidance

• International Organization for Standardization (ISO) – Important ISO standards include ISO 9000 (Quality), ISO 14000 (Environment) and ISO 27000 (Information Security)
• BSI Standards
• IEEE Standards – Responsible for many IT Network standards
• Internet Protocol Standards – RFCs – Detailed standards that cover ‘internetworking’

Projects & Services

• Automated Requirement Measurement (ARM) Tool – Software to determine whether a specification is clear and unambiguous
• ITIL Self Assessment Spreadsheets – Best practice: IT Service Delivery / IT Service Support (Excel Spreadsheets)
• Office of Government Commerce – ITIL, Prince2, Programme Management and more …
• Prince2 Templates – Documentation for Project Management (zip archive: MS Word Format) – Change management – tools and strategies that assist change
• Project Management Glossary – A glossary of project management terms from the Association for Project Management