SCORE is a cooperative effort between SANS/GIAC and the Center for Internet Security(CIS). SCORE is a community of security professionals from a wide range of organizations and backgrounds working to develop consensus regarding minimum standards and best practice information, essentially acting as the research engine for CIS. After consensus is reached and best practice recommendations are validated, they may be formalized by CIS as best practice and minimum standards benchmarks for general use by industry at large.
SCORE Objectives:
- Promote, develop and publish security checklists.
- Build these checklists via consensus, and through open discussion through SCORE mailing lists.
- Use existing references, recruit GIAC-certified professionals, and enlist subject matter experts,
where and when possible.
The following checklists are now being developed: ASP, generic web
applications, ISO 17799, and Linksys broadband routers. Several existing
checklists (generic UNIX, handhelds, and generic firewalls) are also planned
for update, with new topics to be added based on recommendations from the
security community.
For those of you who are interested in participating in the updating of checklists, please contact us at score@sans.org. We look forward to hearing from you!
Featured Article
- FISMA reporting and NIST guidelines, By Faisal Shirazee, MSNS, CISSP