<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.5pt;
font-family:Consolas;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:Consolas;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoPlainText>***Thanks to moderators for allowing this post – it’s
for a good cause!***<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Hi folks, I'd like to introduce myself. My name is Dave
Shackleford, and I represent the Center for Internet Security. Some of you may
know of us, and some of you may not.<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>CIS is a non-profit that coordinates teams of volunteers
who collaborate to create benchmark guides for securing systems. Many of you may
have used some of the CIS tools to score your systems against the benchmarks at
one time or another, and thousands of people download the benchmarks and
scoring tools every month. We are actively seeking IT and security
professionals to participate in the benchmark development process. We are also
looking for anyone experienced in Java and/or XML programming to assist with
our newest scoring tool development (contact me off-list).<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>We are about to begin the consensus process for a
FreeRADIUS security benchmark. Time commitments are minimal, all you need to do
is go and sign up on the mailing list and provide some input to the group on
the benchmark draft when it's released. We always have a team leader who puts
together the initial draft, pulling from a variety of sources; this is then
sent to the mailing list for review and comment. After a consensus is reached,
we publish it. We also list participants' names on our "Honor Roll"
page at <a href="http://www.cisecurity.org/honor_roll.html">http://www.cisecurity.org/honor_roll.html</a>.<o:p></o:p></p>
<p class=MsoPlainText> <o:p></o:p></p>
<p class=MsoPlainText>Our benchmarks are gaining a lot of attention right now.
We are mentioned specifically in the PCI DSS (section 2.2), we are working with
NIST to develop tools and content, and a lot more. If you would like to
participate, please visit the site and sign up. We won't send you any
unsolicited email, just the list postings for benchmark development. Also,
please feel free to sign up for anything not mentioned below, we will be
working on all of the benchmarks over the course of the next year or so. There
are also lots of opportunities to earn CPE credits for participation.<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>If you have any questions, please reply to me off-list
(dshackleford at cisecurity dot org). Thanks for your help! –Dave<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>1. FreeRADIUS Benchmark (OpenLDAP will also be discussed
here)<o:p></o:p></p>
<p class=MsoPlainText>MAILING LIST: <a
href="http://lists.cisecurity.org/mailman/listinfo/access-controls">http://lists.cisecurity.org/mailman/listinfo/access-controls</a><o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Also the Virtualization Benchmark (may interest some)<o:p></o:p></p>
<p class=MsoPlainText>MAILING LIST: <a
href="http://lists.cisecurity.org/mailman/listinfo/vm-security-benchmark">http://lists.cisecurity.org/mailman/listinfo/vm-security-benchmark</a><o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoPlainText>Note: This list will benefit from varied backgrounds and
skill sets.<o:p></o:p></p>
<p class=MsoPlainText><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>