* Book review: Performing Security Analyses of Information Systems
* Technical and nontechnical requirements of CIRTs
* How to avoid getting hooked by a phish
* NIST publishes checklist for securing Windows XP systems
* Film review: ‘Stolen Access: Keeping Information Secure’
* Good ways and not-so-good ways of handling junk faxes
* Resources for getting early warnings of vulnerabilities, threats and incidents
* Correspondent wrestles with organizational dynamics of security, operations groups
* Professor proposes a better log to replay computer events
* Ways to get users to work with you on strong passwords
