There are many web sites that offer useful, security-related information. The following list is provided for information and convenience only.^*

• CERT Coordination Center
• Forum of Incident Response and Security Teams (FIRST)

• National Vulnerability Database (NVD)
  Search U.S. government vulnerability resources for information about vulnerabilities on your systems
• Common Vulnerabilities and Exposures List (CVE)
  Search vulnerabilities by CVE name or browse the US-CERT list of vulnerabilities in CVE name order
• Open Vulnerability Assessment Language (OVAL)
  Identify vulnerabilities on your local systems using OVAL vulnerability definitions
• National Infrastructure Advisory Council's Vulnerability Disclosure Framework 

• Build Security In
  Collection of software assurance and security information to help software developers, architects, and security practitioners create secure systems
• National Institute of Standards and Technology (NIST)
  NIST offers Security Practices & Checklists as well as Special Publications.
• Center for Education and Research in Information Assurance and Security (CERIAS)
• Operationally Critical Threat and Vulnerability Evaluation (OCTAVE)

• F-Secure Corporation's Security Threat Summaries

• Federal Cyber Service: Scholarship for Service Program (SFS)
  The SFS program seeks to increase the number of skilled students entering the fields of information assurance and computer security.
• National Centers of Academic Excellence in Information Assurance Education
  The Centers of Academic Excellence program strengthens higher education in information assurance programs to meet America's growing requirements for cyber security professionals.

• OnGuard Online
  Provides practical tips from the federal government and technology industry to help consumers guard against Internet fraud, secure their computers, and protect personal information
• Stay Safe Online
  Sponsored by the National Cyber Security Alliance (NCSA) to promote safe behavior online
• The NetSmartz Workshop
  Educational resource material for children and teens

• Banking and Finance
  Financial Services ISAC
• Emergency Services
  Emergency Management and Response ISAC
• Energy
  Electricity Sector ISAC
• Food and Agriculture
  Food and Agriculture Institute (ISAC)
• Government
  Multi-State ISAC
• Information Technology
  Information Technology ISAC
• Real Estate
  Real Estate ISAC
• Research and Education
  Research and Education Networking ISAC
• Telecommunications
  Telecommunications ISAC
• Transportation
  Surface Transportation ISAC
• Water
  Water ISAC

• National Strategy to Secure Cyberspace
  This document outlines an initial framework for both organizing and prioritizing efforts to protect against disruptions to our critical information systems and reduce vulnerabilities to cyber threats. The Department of Homeland Security's National Cyber Security Division (NCSD) has been charged with coordinating the implementation of the strategy.
• E-Government Act of 2002 including Title III - The Federal Information Security Management (FISMA) Act 
  The purpose of this Act is to enhance the management and promotion of electronic government services and processes. Title III of this act is the Federal Information Security Management Act of 2002. The E-Government Act permanently supersedes the Homeland Security Act in those instances where both Acts prescribe different amendments to the same provisions of the United States Code.
• Office of Management and Budget Guidance on FISMA 
  The subject of this memorandum is Reporting Instructions for the Federal Information Security Management Act and Updated Guidance on Quarterly IT Security Reporting.
• Homeland Security Presidential Progress and Issues
  This web page describes the Presidential guiding principles for securing the Unisted States from 21st century threats.
  
• IT Sector Baseline Risk Assessment
  The ITSRA identifies and prioritizes national-level risks to critical functions delivered and maintained by the IT Sector, and relied on by all critical infrastructure sectors. It validates the resiliency of key elements of the IT Sector’s infrastructure, and highlights strategies to address risks to enhance the resiliency and security of the IT Sector.