Network Security Assessment: From Vulnerability to Patch

Download Network Security Assessment: From Vulnerability to Patch PDF Online Free

Author :
Publisher : Elsevier
ISBN 13 : 0080512534
Total Pages : 412 pages
Book Rating : 4.0/5 (85 download)

DOWNLOAD NOW!


Book Synopsis Network Security Assessment: From Vulnerability to Patch by : Steve Manzuik

Download or read book Network Security Assessment: From Vulnerability to Patch written by Steve Manzuik and published by Elsevier. This book was released on 2006-12-02 with total page 412 pages. Available in PDF, EPUB and Kindle. Book excerpt: This book will take readers from the discovery of vulnerabilities and the creation of the corresponding exploits, through a complete security assessment, all the way through deploying patches against these vulnerabilities to protect their networks. This is unique in that it details both the management and technical skill and tools required to develop an effective vulnerability management system. Business case studies and real world vulnerabilities are used through the book. It starts by introducing the reader to the concepts of a vulnerability management system. Readers will be provided detailed timelines of exploit development, vendors' time to patch, and corporate path installations. Next, the differences between security assessment s and penetration tests will be clearly explained along with best practices for conducting both. Next, several case studies from different industries will illustrate the effectiveness of varying vulnerability assessment methodologies. The next several chapters will define the steps of a vulnerability assessment including: defining objectives, identifying and classifying assets, defining rules of engagement, scanning hosts, and identifying operating systems and applications. The next several chapters provide detailed instructions and examples for differentiating vulnerabilities from configuration problems, validating vulnerabilities through penetration testing. The last section of the book provides best practices for vulnerability management and remediation.* Unique coverage detailing both the management and technical skill and tools required to develop an effective vulnerability management system* Vulnerability management is rated the #2 most pressing concern for security professionals in a poll conducted by Information Security Magazine* Covers in the detail the vulnerability management lifecycle from discovery through patch.

Agile Application Security

Download Agile Application Security PDF Online Free

Author :
Publisher : "O'Reilly Media, Inc."
ISBN 13 : 1491938811
Total Pages : 385 pages
Book Rating : 4.4/5 (919 download)

DOWNLOAD NOW!


Book Synopsis Agile Application Security by : Laura Bell

Download or read book Agile Application Security written by Laura Bell and published by "O'Reilly Media, Inc.". This book was released on 2017-09-08 with total page 385 pages. Available in PDF, EPUB and Kindle. Book excerpt: Agile continues to be the most adopted software development methodology among organizations worldwide, but it generally hasn't integrated well with traditional security management techniques. And most security professionals aren’t up to speed in their understanding and experience of agile development. To help bridge the divide between these two worlds, this practical guide introduces several security tools and techniques adapted specifically to integrate with agile development. Written by security experts and agile veterans, this book begins by introducing security principles to agile practitioners, and agile principles to security practitioners. The authors also reveal problems they encountered in their own experiences with agile security, and how they worked to solve them. You’ll learn how to: Add security practices to each stage of your existing development lifecycle Integrate security with planning, requirements, design, and at the code level Include security testing as part of your team’s effort to deliver working software in each release Implement regulatory compliance in an agile or DevOps environment Build an effective security program through a culture of empathy, openness, transparency, and collaboration

Asset Attack Vectors

Download Asset Attack Vectors PDF Online Free

Author :
Publisher : Apress
ISBN 13 : 1484236270
Total Pages : 391 pages
Book Rating : 4.4/5 (842 download)

DOWNLOAD NOW!


Book Synopsis Asset Attack Vectors by : Morey J. Haber

Download or read book Asset Attack Vectors written by Morey J. Haber and published by Apress. This book was released on 2018-06-15 with total page 391 pages. Available in PDF, EPUB and Kindle. Book excerpt: Build an effective vulnerability management strategy to protect your organization’s assets, applications, and data. Today’s network environments are dynamic, requiring multiple defenses to mitigate vulnerabilities and stop data breaches. In the modern enterprise, everything connected to the network is a target. Attack surfaces are rapidly expanding to include not only traditional servers and desktops, but also routers, printers, cameras, and other IOT devices. It doesn’t matter whether an organization uses LAN, WAN, wireless, or even a modern PAN—savvy criminals have more potential entry points than ever before. To stay ahead of these threats, IT and security leaders must be aware of exposures and understand their potential impact. Asset Attack Vectors will help you build a vulnerability management program designed to work in the modern threat environment. Drawing on years of combined experience, the authors detail the latest techniques for threat analysis, risk measurement, and regulatory reporting. They also outline practical service level agreements (SLAs) for vulnerability management and patch management. Vulnerability management needs to be more than a compliance check box; it should be the foundation of your organization’s cybersecurity strategy. Read Asset Attack Vectors to get ahead of threats and protect your organization with an effective asset protection strategy. What You’ll Learn Create comprehensive assessment and risk identification policies and procedures Implement a complete vulnerability management workflow in nine easy steps Understand the implications of active, dormant, and carrier vulnerability states Develop, deploy, and maintain custom and commercial vulnerability management programs Discover the best strategies for vulnerability remediation, mitigation, and removal Automate credentialed scans that leverage least-privilege access principles Read real-world case studies that share successful strategies and reveal potential pitfalls Who This Book Is For New and intermediate security management professionals, auditors, and information technology staff looking to build an effective vulnerability management program and defend against asset based cyberattacks

Effective Vulnerability Management

Download Effective Vulnerability Management PDF Online Free

Author :
Publisher : John Wiley & Sons
ISBN 13 : 1394221215
Total Pages : 192 pages
Book Rating : 4.3/5 (942 download)

DOWNLOAD NOW!


Book Synopsis Effective Vulnerability Management by : Chris Hughes

Download or read book Effective Vulnerability Management written by Chris Hughes and published by John Wiley & Sons. This book was released on 2024-04-30 with total page 192 pages. Available in PDF, EPUB and Kindle. Book excerpt: Infuse efficiency into risk mitigation practices by optimizing resource use with the latest best practices in vulnerability management Organizations spend tremendous time and resources addressing vulnerabilities to their technology, software, and organizations. But are those time and resources well spent? Often, the answer is no, because we rely on outdated practices and inefficient, scattershot approaches. Effective Vulnerability Management takes a fresh look at a core component of cybersecurity, revealing the practices, processes, and tools that can enable today's organizations to mitigate risk efficiently and expediently in the era of Cloud, DevSecOps and Zero Trust. Every organization now relies on third-party software and services, ever-changing cloud technologies, and business practices that introduce tremendous potential for risk, requiring constant vigilance. It's more crucial than ever for organizations to successfully minimize the risk to the rest of the organization's success. This book describes the assessment, planning, monitoring, and resource allocation tasks each company must undertake for successful vulnerability management. And it enables readers to do away with unnecessary steps, streamlining the process of securing organizational data and operations. It also covers key emerging domains such as software supply chain security and human factors in cybersecurity. Learn the important difference between asset management, patch management, and vulnerability management and how they need to function cohesively Build a real-time understanding of risk through secure configuration and continuous monitoring Implement best practices like vulnerability scoring, prioritization and design interactions to reduce risks from human psychology and behaviors Discover new types of attacks like vulnerability chaining, and find out how to secure your assets against them Effective Vulnerability Management is a new and essential volume for executives, risk program leaders, engineers, systems administrators, and anyone involved in managing systems and software in our modern digitally-driven society.

Network Vulnerability Assessment

Download Network Vulnerability Assessment PDF Online Free

Author :
Publisher : Packt Publishing Ltd
ISBN 13 : 1788624726
Total Pages : 243 pages
Book Rating : 4.7/5 (886 download)

DOWNLOAD NOW!


Book Synopsis Network Vulnerability Assessment by : Sagar Rahalkar

Download or read book Network Vulnerability Assessment written by Sagar Rahalkar and published by Packt Publishing Ltd. This book was released on 2018-08-31 with total page 243 pages. Available in PDF, EPUB and Kindle. Book excerpt: Build a network security threat model with this comprehensive learning guide Key Features Develop a network security threat model for your organization Gain hands-on experience in working with network scanning and analyzing tools Learn to secure your network infrastructure Book Description The tech world has been taken over by digitization to a very large extent, and so it’s become extremely important for an organization to actively design security mechanisms for their network infrastructures. Analyzing vulnerabilities can be one of the best ways to secure your network infrastructure. Network Vulnerability Assessment starts with network security assessment concepts, workflows, and architectures. Then, you will use open source tools to perform both active and passive network scanning. As you make your way through the chapters, you will use these scanning results to analyze and design a threat model for network security. In the concluding chapters, you will dig deeper into concepts such as IP network analysis, Microsoft Services, and mail services. You will also get to grips with various security best practices, which will help you build your network security mechanism. By the end of this book, you will be in a position to build a security framework fit for an organization. What you will learn Develop a cost-effective end-to-end vulnerability management program Implement a vulnerability management program from a governance perspective Learn about various standards and frameworks for vulnerability assessments and penetration testing Understand penetration testing with practical learning on various supporting tools and techniques Gain insight into vulnerability scoring and reporting Explore the importance of patching and security hardening Develop metrics to measure the success of the vulnerability management program Who this book is for Network Vulnerability Assessment is for security analysts, threat analysts, and any security professionals responsible for developing a network threat model for an organization. This book is also for any individual who is or wants to be part of a vulnerability management team and implement an end-to-end robust vulnerability management program.

Mastering Patch Management

Download Mastering Patch Management PDF Online Free

Author :
Publisher : Cybellium Ltd
ISBN 13 :
Total Pages : 232 pages
Book Rating : 4.8/5 (591 download)

DOWNLOAD NOW!


Book Synopsis Mastering Patch Management by : Cybellium Ltd

Download or read book Mastering Patch Management written by Cybellium Ltd and published by Cybellium Ltd. This book was released on 2023-09-06 with total page 232 pages. Available in PDF, EPUB and Kindle. Book excerpt: Cybellium Ltd is dedicated to empowering individuals and organizations with the knowledge and skills they need to navigate the ever-evolving computer science landscape securely and learn only the latest information available on any subject in the category of computer science including: - Information Technology (IT) - Cyber Security - Information Security - Big Data - Artificial Intelligence (AI) - Engineering - Robotics - Standards and compliance Our mission is to be at the forefront of computer science education, offering a wide and comprehensive range of resources, including books, courses, classes and training programs, tailored to meet the diverse needs of any subject in computer science. Visit https://www.cybellium.com for more books.

Practical Vulnerability Management

Download Practical Vulnerability Management PDF Online Free

Author :
Publisher : No Starch Press
ISBN 13 : 1593279892
Total Pages : 194 pages
Book Rating : 4.5/5 (932 download)

DOWNLOAD NOW!


Book Synopsis Practical Vulnerability Management by : Andrew Magnusson

Download or read book Practical Vulnerability Management written by Andrew Magnusson and published by No Starch Press. This book was released on 2020-09-29 with total page 194 pages. Available in PDF, EPUB and Kindle. Book excerpt: Practical Vulnerability Management shows you how to weed out system security weaknesses and squash cyber threats in their tracks. Bugs: they're everywhere. Software, firmware, hardware -- they all have them. Bugs even live in the cloud. And when one of these bugs is leveraged to wreak havoc or steal sensitive information, a company's prized technology assets suddenly become serious liabilities. Fortunately, exploitable security weaknesses are entirely preventable; you just have to find them before the bad guys do. Practical Vulnerability Management will help you achieve this goal on a budget, with a proactive process for detecting bugs and squashing the threat they pose. The book starts by introducing the practice of vulnerability management, its tools and components, and detailing the ways it improves an enterprise's overall security posture. Then it's time to get your hands dirty! As the content shifts from conceptual to practical, you're guided through creating a vulnerability-management system from the ground up, using open-source software. Along the way, you'll learn how to: • Generate accurate and usable vulnerability intelligence • Scan your networked systems to identify and assess bugs and vulnerabilities • Prioritize and respond to various security risks • Automate scans, data analysis, reporting, and other repetitive tasks • Customize the provided scripts to adapt them to your own needs Playing whack-a-bug won't cut it against today's advanced adversaries. Use this book to set up, maintain, and enhance an effective vulnerability management system, and ensure your organization is always a step ahead of hacks and attacks.

Creating an Information Security Program from Scratch

Download Creating an Information Security Program from Scratch PDF Online Free

Author :
Publisher : CRC Press
ISBN 13 : 1000449718
Total Pages : 223 pages
Book Rating : 4.0/5 (4 download)

DOWNLOAD NOW!


Book Synopsis Creating an Information Security Program from Scratch by : Walter Williams

Download or read book Creating an Information Security Program from Scratch written by Walter Williams and published by CRC Press. This book was released on 2021-09-14 with total page 223 pages. Available in PDF, EPUB and Kindle. Book excerpt: This book is written for the first security hire in an organization, either an individual moving into this role from within the organization or hired into the role. More and more, organizations are realizing that information security requires a dedicated team with leadership distinct from information technology, and often the people who are placed into those positions have no idea where to start or how to prioritize. There are many issues competing for their attention, standards that say do this or do that, laws, regulations, customer demands, and no guidance on what is actually effective. This book offers guidance on approaches that work for how you prioritize and build a comprehensive information security program that protects your organization. While most books targeted at information security professionals explore specific subjects with deep expertise, this book explores the depth and breadth of the field. Instead of exploring a technology such as cloud security or a technique such as risk analysis, this book places those into the larger context of how to meet an organization's needs, how to prioritize, and what success looks like. Guides to the maturation of practice are offered, along with pointers for each topic on where to go for an in-depth exploration of each topic. Unlike more typical books on information security that advocate a single perspective, this book explores competing perspectives with an eye to providing the pros and cons of the different approaches and the implications of choices on implementation and on maturity, as often a choice on an approach needs to change as an organization grows and matures.

International Conference on Computer Applications 2012 :: Volume 06

Download International Conference on Computer Applications 2012 :: Volume 06 PDF Online Free

Author :
Publisher : TECHNO FORUM R&D CENTRE
ISBN 13 : 8192057593
Total Pages : 213 pages
Book Rating : 4.1/5 (92 download)

DOWNLOAD NOW!


Book Synopsis International Conference on Computer Applications 2012 :: Volume 06 by : Kokula Krishna Hari K

Download or read book International Conference on Computer Applications 2012 :: Volume 06 written by Kokula Krishna Hari K and published by TECHNO FORUM R&D CENTRE. This book was released on with total page 213 pages. Available in PDF, EPUB and Kindle. Book excerpt:

Developing Cybersecurity Programs and Policies

Download Developing Cybersecurity Programs and Policies PDF Online Free

Author :
Publisher : Pearson IT Certification
ISBN 13 : 0134858549
Total Pages : 958 pages
Book Rating : 4.1/5 (348 download)

DOWNLOAD NOW!


Book Synopsis Developing Cybersecurity Programs and Policies by : Omar Santos

Download or read book Developing Cybersecurity Programs and Policies written by Omar Santos and published by Pearson IT Certification. This book was released on 2018-07-20 with total page 958 pages. Available in PDF, EPUB and Kindle. Book excerpt: All the Knowledge You Need to Build Cybersecurity Programs and Policies That Work Clearly presents best practices, governance frameworks, and key standards Includes focused coverage of healthcare, finance, and PCI DSS compliance An essential and invaluable guide for leaders, managers, and technical professionals Today, cyberattacks can place entire organizations at risk. Cybersecurity can no longer be delegated to specialists: success requires everyone to work together, from leaders on down. Developing Cybersecurity Programs and Policies offers start-to-finish guidance for establishing effective cybersecurity in any organization. Drawing on more than 20 years of real-world experience, Omar Santos presents realistic best practices for defining policy and governance, ensuring compliance, and collaborating to harden the entire organization. First, Santos shows how to develop workable cybersecurity policies and an effective framework for governing them. Next, he addresses risk management, asset management, and data loss prevention, showing how to align functions from HR to physical security. You’ll discover best practices for securing communications, operations, and access; acquiring, developing, and maintaining technology; and responding to incidents. Santos concludes with detailed coverage of compliance in finance and healthcare, the crucial Payment Card Industry Data Security Standard (PCI DSS) standard, and the NIST Cybersecurity Framework. Whatever your current responsibilities, this guide will help you plan, manage, and lead cybersecurity–and safeguard all the assets that matter. Learn How To · Establish cybersecurity policies and governance that serve your organization’s needs · Integrate cybersecurity program components into a coherent framework for action · Assess, prioritize, and manage security risk throughout the organization · Manage assets and prevent data loss · Work with HR to address human factors in cybersecurity · Harden your facilities and physical environment · Design effective policies for securing communications, operations, and access · Strengthen security throughout the information systems lifecycle · Plan for quick, effective incident response and ensure business continuity · Comply with rigorous regulations in finance and healthcare · Plan for PCI compliance to safely process payments · Explore and apply the guidance provided by the NIST Cybersecurity Framework

Official (ISC)2 Guide to the CSSLP CBK

Download Official (ISC)2 Guide to the CSSLP CBK PDF Online Free

Author :
Publisher : CRC Press
ISBN 13 : 1466571330
Total Pages : 800 pages
Book Rating : 4.4/5 (665 download)

DOWNLOAD NOW!


Book Synopsis Official (ISC)2 Guide to the CSSLP CBK by : Mano Paul

Download or read book Official (ISC)2 Guide to the CSSLP CBK written by Mano Paul and published by CRC Press. This book was released on 2013-08-20 with total page 800 pages. Available in PDF, EPUB and Kindle. Book excerpt: Application vulnerabilities continue to top the list of cyber security concerns. While attackers and researchers continue to expose new application vulnerabilities, the most common application flaws are previous, rediscovered threats. The text allows readers to learn about software security from a renowned security practitioner who is the appointed software assurance advisor for (ISC)2. Complete with numerous illustrations, it makes complex security concepts easy to understand and implement. In addition to being a valuable resource for those studying for the CSSLP examination, this book is also an indispensable software security reference for those already part of the certified elite. A robust and comprehensive appendix makes this book a time-saving resource for anyone involved in secure software development.

Handbook of SCADA/Control Systems Security

Download Handbook of SCADA/Control Systems Security PDF Online Free

Author :
Publisher : CRC Press
ISBN 13 : 1466502266
Total Pages : 383 pages
Book Rating : 4.4/5 (665 download)

DOWNLOAD NOW!


Book Synopsis Handbook of SCADA/Control Systems Security by : Robert Radvanovsky

Download or read book Handbook of SCADA/Control Systems Security written by Robert Radvanovsky and published by CRC Press. This book was released on 2013-02-19 with total page 383 pages. Available in PDF, EPUB and Kindle. Book excerpt: The availability and security of many services we rely upon—including water treatment, electricity, healthcare, transportation, and financial transactions—are routinely put at risk by cyber threats. The Handbook of SCADA/Control Systems Security is a fundamental outline of security concepts, methodologies, and relevant information pertaining to the supervisory control and data acquisition (SCADA) systems and technology that quietly operate in the background of critical utility and industrial facilities worldwide. Divided into five sections, the book examines topics comprising functions within and throughout industrial control systems (ICS) environments. Topics include: Emerging trends and threat factors that plague the ICS security community Risk methodologies and principles that can be applied to safeguard and secure an automated operation Methods for determining events leading to a cyber incident, and methods for restoring and mitigating issues—including the importance of critical communications The necessity and reasoning behind implementing a governance or compliance program A strategic roadmap for the development of a secured SCADA/control systems environment, with examples Relevant issues concerning the maintenance, patching, and physical localities of ICS equipment How to conduct training exercises for SCADA/control systems The final chapters outline the data relied upon for accurate processing, discusses emerging issues with data overload, and provides insight into the possible future direction of ISC security. The book supplies crucial information for securing industrial automation/process control systems as part of a critical infrastructure protection program. The content has global applications for securing essential governmental and economic systems that have evolved into present-day security nightmares. The authors present a "best practices" approach to securing business management environments at the strategic, tactical, and operational levels.

Handbook of SCADA/Control Systems Security

Download Handbook of SCADA/Control Systems Security PDF Online Free

Author :
Publisher : CRC Press
ISBN 13 : 149871708X
Total Pages : 432 pages
Book Rating : 4.4/5 (987 download)

DOWNLOAD NOW!


Book Synopsis Handbook of SCADA/Control Systems Security by : Burt G. Look

Download or read book Handbook of SCADA/Control Systems Security written by Burt G. Look and published by CRC Press. This book was released on 2016-05-10 with total page 432 pages. Available in PDF, EPUB and Kindle. Book excerpt: This comprehensive handbook covers fundamental security concepts, methodologies, and relevant information pertaining to supervisory control and data acquisition (SCADA) and other industrial control systems used in utility and industrial facilities worldwide. Including six new chapters, six revised chapters, and numerous additional figures, photos, and illustrations, it addresses topics in social implications and impacts, governance and management, architecture and modeling, and commissioning and operations. It presents best practices as well as methods for securing a business environment at the strategic, tactical, and operational levels.

Vulnerability Management Program Guide

Download Vulnerability Management Program Guide PDF Online Free

Author :
Publisher :
ISBN 13 :
Total Pages : 54 pages
Book Rating : 4.7/5 (135 download)

DOWNLOAD NOW!


Book Synopsis Vulnerability Management Program Guide by : Cyber Security Resource

Download or read book Vulnerability Management Program Guide written by Cyber Security Resource and published by . This book was released on 2021-02-25 with total page 54 pages. Available in PDF, EPUB and Kindle. Book excerpt: This book comes with access to a digital download of customizable threat and vulnerability management program templates that can be used to implement a vulnerability management program in any organization. Organizations need documentation to help them prove the existence of a "vulnerability management program" to address this requirement in vendor contracts and regulations they are facing. Similar to the other cybersecurity documentation we sell, many of our customers tried and failed to create their own program-level documentation. It is not uncommon for organizations to spent hundreds of man-hours on this type of documentation effort and only have it end in failure. That is why we are very excited about this product, since it fills a void at most organizations, both large and small.The Vulnerability Management Program Guide providers program-level guidance to directly supports your organization's policies and standards for managing cybersecurity risk. Unfortunately, most companies lack a coherent approach to managing risks across the enterprise: Who is responsible for managing vulnerabilities.What is in scope for patching and vulnerability management.Defines the vulnerability management methodology.Defines timelines for conducting patch management operations.Considerations for assessing risk with vulnerability management.Vulnerability scanning and penetration testing guidance.

Software Development Techniques for Constructive Information Systems Design

Download Software Development Techniques for Constructive Information Systems Design PDF Online Free

Author :
Publisher : IGI Global
ISBN 13 : 1466636807
Total Pages : 480 pages
Book Rating : 4.4/5 (666 download)

DOWNLOAD NOW!


Book Synopsis Software Development Techniques for Constructive Information Systems Design by : Buragga, Khalid A.

Download or read book Software Development Techniques for Constructive Information Systems Design written by Buragga, Khalid A. and published by IGI Global. This book was released on 2013-03-31 with total page 480 pages. Available in PDF, EPUB and Kindle. Book excerpt: Software development and information systems design have a unique relationship, but are often discussed and studied independently. However, meticulous software development is vital for the success of an information system. Software Development Techniques for Constructive Information Systems Design focuses the aspects of information systems and software development as a merging process. This reference source pays special attention to the emerging research, trends, and experiences in this area which is bound to enhance the reader's understanding of the growing and ever-adapting field. Academics, researchers, students, and working professionals in this field will benefit from this publication's unique perspective.

Guide to General Server Security

Download Guide to General Server Security PDF Online Free

Author :
Publisher : DIANE Publishing
ISBN 13 : 1437913504
Total Pages : 53 pages
Book Rating : 4.4/5 (379 download)

DOWNLOAD NOW!


Book Synopsis Guide to General Server Security by : Karen Scarfone

Download or read book Guide to General Server Security written by Karen Scarfone and published by DIANE Publishing. This book was released on 2009-05 with total page 53 pages. Available in PDF, EPUB and Kindle. Book excerpt: Servers are frequently targeted by attackers because of the value of their data and services. For example, a server might contain personally identifiable info. that could be used to perform identity theft. This document is intended to assist organizations in installing, configuring, and maintaining secure servers. More specifically, it describes, in detail, the following practices to apply: (1) Securing, installing, and configuring the underlying operating system; (2) Securing, installing, and configuring server software; (3) Maintaining the secure configuration through application of appropriate patches and upgrades, security testing, monitoring of logs, and backups of data and operating system files. Illus.

DoD Business Systems Modernization

Download DoD Business Systems Modernization PDF Online Free

Author :
Publisher : DIANE Publishing
ISBN 13 : 1437909566
Total Pages : 70 pages
Book Rating : 4.4/5 (379 download)

DOWNLOAD NOW!


Book Synopsis DoD Business Systems Modernization by : Randolph C. Hite

Download or read book DoD Business Systems Modernization written by Randolph C. Hite and published by DIANE Publishing. This book was released on 2009-02 with total page 70 pages. Available in PDF, EPUB and Kindle. Book excerpt: The DoD¿s multi-billion dollar business systems modernization efforts are high risk, in part because key information tech. (IT) mgmt. controls have not been implemented on key investments, such as the Navy Cash program. Initiated in 2001, Navy Cash is a joint Dept. of the Navy (DoN) and Dept. of the Treasury Financial Mgmt. Service program to create a cashless environment on ships using smart card tech., and is estimated to cost about $320 million to fully deploy. This report analyzed whether DoN is effectively implementing IT mgmt. controls on the program, including architectural alignment, economic justification, requirements dev¿t. and mgmt., risk mgmt., security mgmt., and system quality measurement against relevant guidance. Illus.