http://all.net/
=> Security Metrics

This new security metrics product provides a metrics framework for
measuring security programs. It is free for educational and personal
use and the sampler can be used to test the product for companies
interested in possible purchase. The free version includes modules for:

Data retention and disposition
Duty to protect and risk management
Enterprise security architecture
Security Governance Checklists

The for fee version includes standards that require that you have
licenses from the standards groups - we would be free if they were...

ISO 27001 - Information Security Management System standard
ISO 17799:2005 - the most widely used security standard
ISO 15489-1 - Data retention and disposition standard
Various NIST security standards
Various physical security standards and metrics

Please give them a try and let us know what you think.

FC

- This communication is confidential to the parties it is intended to
serve -
Fred Cohen & Associates tel/fax: 925-454-0171
http://all.net/ 572 Leona Drive Livermore, CA 94550