May 2006

ID: 00339
Ref: 332/2006
Date: 09 May 2006:14:10:21
Version: 1

---

Title: New NISCC Technical Note and new Policy and Good Practice guide
Abstract:
Vendors affected: NISCC
Operating systems affected: NISCC
Applications affected: NISCC

---

Title
=====

New NISCC Technical Note and new Policy and Good Practice guide


Detail
======

1. NISCC Technical Note 03/2006 'Peripheral Access Management'.
This document provides guidance to organisations on managing the security risks of
peripheral access devices, such as USB data keys and personal music players.
URL: http://www.niscc.gov.uk/niscc/docs/re-20060508-00337.pdf?lang=en

2. NISCC Best Practice Guide 'Commercially Available Penetration Testing'.
This paper provides a technical overview of the different types of penetration
test and how these can be used within wider information security assurance activities.
It also provides guidance on how organisations should plan for, procure and manage
such tests.
URL: http://www.niscc.gov.uk/niscc/docs/re-20060508-00338.pdf?lang=en