Resources

--------------------------------

Welcome to Resources

Select any category listed to receive resources relating to that field.

Back To Basics

Professor Messer | SY0-601 CompTIA Security+ Course

SANS | Coolest Careers in Cybersecurity

Dfir Diva | Digital Forensics and Incident Response Training

AttackIQ Academy | Training

Tryhackme | Red Team Training

Cyber Mentor Dojo | Find a mentor to guide you on your security path.

ISC2 | Self Study Resources

GRC

JAS ANZ | Accredited Bodies Search

ACSC | Information Security Manual (ISM)

ACSC | Essential Eight

NIST | CyberSecurity Frameworks

ISO/IEC 27000 | Information Security Management System (ISMS) - Overview and vocabulary

ISO/IEC 27001 | Information Security Management System (ISMS)

ISO/IEC 27002 | Information security controls

ISO/IEC 27701 | Privacy Information Management

ISO/IEC 31000 | Risk Management

PCI Security Standards Council | PCI DSS

ACSC | Requirements for Reporting
Reporting a cybercrime, cyber security incident or vulnerability to the ACSC

DLA Piper | World Data Protection Laws Map

Federal Register of Legislation | Legislation Search

Federal Register of Legislation | Privacy Act 1988

OAIC | Information Privacy Officer Toolkit

Federal Register of Legislation | Security of Critical Infrastructure Act 2018

Federal Department of Home Affairs | Cyber and Infrastructure Security Center (SOCI)

Federal Government Policy | Protective Security Policy Framework

QLD Government Policy | Cyber Security

OAIC | Australian Privacy Principles

OAIC | Privacy Impact Assessments

HighTable | How to Implement ISO/IEC 27001 (Article/Videos)

iso27001security.com | Information Security Management System (ISMS) - ToolKit

ISOGlobal | ISO/IEC 27001 (Article)

CSA | Security, Trust, Assurance and Risk (STAR)

ACSC | Strategies to Mitigate Cyber Security Incidents

CISA | Tabletop Exercise Packages

ACSC | Incident Management

SANS | Security Policy Templates

SANS | An Overview of Threat and Risk Assessment

RFP 360 | Vendor Risk Assessments (Article)

eSecurity planet | Best Third-Party Risk Management (TPRM) Tools for 2022 (Article)

UpGuard | Third-Party Risk Assessment Best Practices in 2022 (Article)

SmartSheet | Vendor Risk Assessment Templates (Article)

OntTrust | GRC Audit Management (Article)

SCF | Secure Controls Framework

OCEG
OCEG is a global nonprofit organization and community. We inform, empower, and help advance the careers of our 120,000+ members who work in governance, strategy, risk, compliance, security and audit.

AppSec

OWASP | Top 10

OWASP | Software Assurance Maturity Model

OWASP | Application Security Verification Standard

cisecurity | CIS Software Supply Chain Security Guide

OWASP | OWASP Top 10 Proactive Controls

OWASP | Threat Modeling

OWASP | Static Application Security Testing (SAST)

OWASP | Dynamic Application Security Testing (DAST)

SNYK | Vulnerability Scanner (Code)

mend.io | Vulnerability Scanner (Code)

Operations

D3fend MITRE Guide

MITRE Attack Tactics

Incident Response | Playbooks

Microsoft | Incident response playbooks

Microsoft | Incident response process

Splunk | SPL Search Reference

Splunk | Common Information Model (CIM)

SANS | Internet Storm Center (ISC)

CanaryTokens | Token Generater

Memberships

AISA | Australian Information Security Association

OCEG
OCEG is a global nonprofit organization and community. We inform, empower, and help advance the careers of our 120,000+ members who work in governance, strategy, risk, compliance, security and audit.

Events

CrikeyCon
Meetup: crikeycon.com

AISA | BrisSec

BSides

Meetup | SecTalks Brisbane

Meetup | Brisbane Cyber Security Meetup

Meetup | OWASP Brisbane Chapter

AUSCERT | CYBER SECURITY CONFERENCE

Assembled By JackBLeyden