Security Directories on This Site
16 entriesCurated directories across the security landscape.
Frameworks & Standards
9 entriesWhat security programmes are measured against.
Vulnerability & Incident Resources
11 entriesWhere vulnerabilities are catalogued and incidents coordinated.
Learning, Certification & Community
4 entriesTraining and professional bodies.
Conferences & Events
4 entriesMajor security events.
Tool & Vendor Roundups (reading list)
16 entriesArticles ranking security tools and companies; some are dated, so check the publication year.
Related Pages
22 entriesNeighbouring hubs.
Frequently Asked Questions
What is IT security?
IT security is the practice of protecting information systems, networks, applications and data from unauthorised access, attack and loss, through technology, processes and people.
Which frameworks should I start with?
The NIST Cybersecurity Framework and ISO/IEC 27001 for programme structure, CIS Controls for prioritised safeguards, MITRE ATT&CK for attacker behaviour and the OWASP Top 10 for web applications.
Where do I check known vulnerabilities?
The CVE Program and NIST NVD catalogue vulnerabilities, and the CISA Known Exploited Vulnerabilities catalogue shows which are being actively exploited.
How do this page and the Cybersecurity page differ?
This page covers frameworks, standards, resources and roundups; Cybersecurity and Security Software list tools and vendors by category.
Why is the roundup list marked as dated?
Rankings and "top companies" articles age quickly, so each should be checked for its publication year before relying on it.