• Whitepapers
• All Organizations
• All Financial Organizations
• Credit Unions
• Banks

Whitepapers

- How To Buy Security Testing Services
	Learn what questions to ask when searching for a security testing company.

All Organizations

- Infosec Writers
	This site is full of papers and eBooks written by experts from every corner of the Information Security world.
- SecurityFocus
	This is another general security resource site. It also is host to an online database of vulnerabilities found in IT products.
- SANS Institute
	SANS is one of the best resources for information security knowledge on the internet. There, you will find a large number of documents ranging from whitepapers to sample policies. They also provide training for IT and security professionals.
- National Institute of Standards and Technology
	This is the Federal Government "Guideline on Network Security" Testing guidelines - check out pages 3-19 / 3-21 for frequency guidelines for each test. Please note before printing: this is a 91 page pdf.

All Financial Institutions

- Gramm-Leach-Bliley Act (GLBA) of 1999 Wikipedia entry

- Sarbanes-Oxley Act Wikipedia entry

Credit Unions

- NCUA’s Credit Union Resources Page
	This is the NCUA’s page listing its own online resources for credit unions. A featured part of this page is a set of links to all of the IST resources. A good starting place is the NCUA’s letter 06-CU-10, which contains a worksheet to be used for preparing for an IT security examination. It also happens to be a great tool for determining what areas you may need help in.

Banks

- American Bankers Association’s statement on data security

- FDIC list of resources, featuring IT/Security section