Welcome to a blog about boring stuff
Computer security takes a lot of work. How do you measure your progress and success? How do you know from where you came, and to where you should head? Wouldn’t it be great if some parts of your information security program ran itself?
Through the use of standards and automation, you can add math and science to your information security program. Get world-class results that are measurable, documentable, and auditable.
Best of all, all of these standards and techniques are absolutely free and community driven. Share your successes and challanges and help give back to the community. We can drive the vendors to become more compliant with security standards and make all our jobs much easier.
